Where to read next

• DECISIONS.md records what was chosen, what was rejected, and why; every entry names the incident or question that produced it.
• SECURITY.md is the reporting path and the controls tables, each control with the test that proves it.
• AGENTS.md is the standards this project is built to.

---