This index points operators and contributors to the authoritative v2.0 procedures. Do not duplicate runbook steps in release evidence or issue comments.

Start here

Runbooks

Need	Authoritative guide
Repository lifecycle	repositories
Metadata protection	metadata
Master and repository keys	keys
Encrypted recovery bundle	recovery bundle
SSH source hardening	SSH sources
Notification operations	notifications
Upgrade safety	upgrade
Host loss	disaster recovery

Security boundaries

Repository encryption threat model
Notification egress and delivery policy
SSH sources require private-key authentication, exact host-key pinning, and a forced-SFTP chrooted account. No password, shell, agent, tunnel, or remote-command mode exists.

Release records

Release evidence records verification rather than replacing runbooks. v2.0 scale certification is documented in release/m15-evidence.md and release/m15-scale-report.json.

Verify

grep -c '^## ' README.md
make check