Adds the installation manual, architecture overview, and illustrated user
manual as a five-story epic, plus the acceptance gate that keeps them true.
The documentation is markdown under docs/, so the same files are readable in
the repository and rendered by the deployed application at /app/#/docs. An
operator who was handed a URL and an access secret has no repository checkout
in front of them, and the network the application is deployed to is not
assumed to reach a CDN.
Two decisions are recorded in the epic rather than left to implementation:
- The renderer is vendored (marked), not written and not fetched.
- Diagrams are mermaid, rendered client-side, with script-src untouched.
Whether mermaid needs 'unsafe-eval' was measured rather than assumed: its
bundle contains no eval( and no new Function, and rendered under this
application's exact CSP it produced an SVG with no script-src violation.
What it does violate is style-src, which gains 'unsafe-inline'. With
script-src, img-src, connect-src, and font-src all unchanged, that leaves
defacement rather than execution or exfiltration. The alternative --
pre-rendering diagrams to committed SVG with the already-installed
Playwright -- is recorded as the migration if that trade is ever refused.
Screenshots are generated from the running application, never pasted, and
every documented setting, command, exit code, error code, and state is
cross-checked against the code that implements it, so stale documentation
fails a test instead of misleading an operator.
Co-Authored-By: Claude <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_015csGY8XV1M92fHfKnMmjtu
