This directory separates the current reviewer route from supporting design notes and historical release evidence. The repo is a local, file-based detection workflow lab, not a SIEM, dashboard, or production monitoring platform.
reviewer-pack.md: top-level reviewer pack, demo matrix, artifact naming contract, and v1 readiness gateoperator-reproduction.md: shortest local path from clone to verifying all five demosreviewer-path.md: choose a demo by review questionreviewer-brief.md: short problem, value, evidence, and boundary summaryv1-contract-freeze.md: v1.0 five-demo contract freeze, release status, and contract scopev1-readiness-gate.md: fixed inputs, fixed outputs, schema validation, artifact regeneration, and test pass requirementsrelease-v1.0.md: v1.0 reviewer-contract release notes with the explicit non-SIEM boundaryrelease-v1.1.md: v1.1 operator reproduction and issue triage release notesrelease-v1.2.md: v1.2 architecture cohesion release notesv0.6-to-v1-artifact-diff.md: additive artifact contract and compatibility diff from the fourth demo to the fifthevidence-pipeline-contract.md: JSON/JSONL schema contracts for reviewer-facing evidence artifactsschema-compatibility-matrix.md: schema versions, artifact paths, and compatibility labelsreviewer-artifact-diff.md: release diff contract for reviewer-facing artifact changesvocabulary.md: cross-demo vocabulary for evidence workflow terms and bounded correlationarchitecture.md: local file-based workflow diagramroadmap.md: v1 reviewer contract stabilization phase
sample-output.md: committed output counts and sample artifactsevent-time-model.md: event, observed, window, and artifact time semanticsdesign-notes.md: original telemetry-window design boundariesai-assisted-detection-design.md: bounded AI-assisted detection designai-assisted-detection-examples.md: example AI-assisted detection outputs and guardrail behaviorai-assisted-detection-reviewer-pack.md: reviewer pack for the AI-assisted democonfig-change-investigation-demo-design.md: config-change investigation design notesconfig-change-investigation-reviewer-pack.md: reviewer pack for the config-change investigation demo
These files are retained as release evidence snapshots. Use the current reviewer route above for the maintained review path.