How this works¶

branch → GitLab MR → approve → merge to main
                                    │
                                    ├─ mkdocs build → this site
                                    └─ kernel index → agent skills

Rules¶

main is approved, portal-visible knowledge only (public / internal).
Drafts live on branches. They never publish.
must procedures are not edited in a wiki UI. Open an MR.
Withdrawn pages are removed or replaced on main; the next build drops them.
Agents treat ranking as relevance, never as approval.

Layers¶

Layer	Changes per org?
Kernel (claims, PDP, lifecycle)	No
Policy packs (ISO 27001, SOC 2, GDPR, ISO 42001, HIPAA)	Enable/disable
SDLC content pack	Filtered by `tech_profile`
`org.yaml`	Yes — the only org config