Add first-class Security section and a For Developers section
Security content was scattered — a subsection buried in Advanced-Topics,
plus a production lesson about magnet-link metadata timing tucked into
Contexts. Pull it all into a standalone Security page (threat model, API
auth, network exposure, credential management, content-safety rules,
the metadata-timing limitation, log hygiene, vulnerability reporting)
and give it its own sidebar category instead of hiding it in
Configuration.
Also split codebase-facing content out of Advanced-Topics (an
end-user page) into a proper Developers section: Architecture Internals
(module map, process boundaries, request lifecycle), Extending the
Engine (custom operators/actions, moved out wholesale), a Testing Guide
grounded in the real pytest layout and markers, and a Release Process
page grounded in the actual bump-version.sh/release.yml/docker-build.yml
pipeline. Contributing now cross-links into these instead of standing
alone.
Claude-Session: https://claude.ai/code/session_01RmGXvFTXNX36azVbVKMHLL