Keyverse already has strong feature-specific specifications, doctoring, federation/onboarding, topology, and operations records. This index makes the cross-cutting product and architecture graph explicit without replacing those slice documents.
| Area | Canonical document |
|---|---|
| Product requirements | docs/PRD.md |
| Technical requirements | docs/TRD.md |
| Architecture | ARCHITECTURE.md |
| Topology | docs/topology.md |
| UML/runtime/authority flows | docs/UML.md |
| Logical/physical ERD | docs/ERD.md |
| Threat model | docs/THREAT_MODEL.md |
| Test strategy | docs/TEST_STRATEGY.md |
| Operability/recovery/release | docs/OPERABILITY.md |
| Requirements/evidence traceability | docs/TRACEABILITY.md |
| Product and technical gap baseline | docs/product-technical-gap-baseline.md and docs/doctoring/product-technical-gap-baseline.md |
| Architecture decisions | docs/adr/README.md |
| Federation onboarding | docs/federation-onboarding.md |
| RP onboarding | docs/rp-onboarding.md |
| Account merge/unification | docs/merge-unification-flow.md |
| Standards/APA 7 evidence | docs/doctoring/ and docs/papers/ |
| Operations | docs/operations/ |
| Security reporting | SECURITY.md |
| Agent instructions | AGENTS.md |
| Agent context | CLAUDE.md |
| Product overview | README.md |
| Change history | CHANGELOG.md |
- implemented-main — present on protected main with source/tests.
- active-PR — implemented only on an open PR and not yet a protected-main claim.
- deployment-owned — private tenant/customer secret/configuration behavior owned by deployment controller/secret store.
- external-system — Keycloak/ADFS/LDAP/external OIDC/HR/IGA behavior not implemented by Keyverse itself.
- planned — accepted target without executable implementation.
Open PR #72 OIDC RP claim mapper profile and PR #74 hourly GitHub API remediation remain active-PR until merged. Keyverse's current protected-main desired-state/reconciliation capabilities are documented independently from those changes.