docs(wiki): rework to audience-first IA, plain-but-technical, accurate to 0.15.20
Restructured the flat 18-page wiki into a 6-group, audience-first
information architecture (Start here / Operate / Guard AI agents /
How it works / Extend / Trust and compliance) with a "pick your path"
Home funnel and a matching sidebar.
- Surfaced the AI-agent-guardrail mission, previously invisible: new
AI Agent Guardrail, Connect Your Agent, and Safe Observe and Allowlist
pages covering the MCP proxy, agent mcp-serve, the loopback
check-command contract, and the never-blind allowlist workflow.
- Split the 755-line Module-Authoring into Write a Module (quickstart)
and Module Reference; split Operations into Install and First Run plus
Everyday Operations; reframed capabilities as What It Detects.
- One canonical owner per fact (commands to CLI Reference, config to
Configuration, retention/GDPR to Privacy and GDPR), removing the
duplicated and contradictory CLI/supervisor/retention content.
- Rewrote every page plain-but-technical with a "For:" audience header,
outcomes instead of internal spec numbers, and no em dashes.
- Fixed stale facts (0.15.7 to 0.15.20, 29 to 30 collectors, 8 to 9
built-in Sigma, the dead ctl-scan command, the check-command field).
- Deleted 11 superseded legacy pages that still rendered with stale
versions and spec-number leaks.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>