docs: establish canonical documentation architecture (#1210)

2026-08-13 17:56:13 +00:00
parent f82307c4dc
commit 7a6fb024b4
241 changed files with 4722 additions and 1579 deletions
@@ -0,0 +1,20 @@
+# Security
+
+> **Status:** Partially migrated. The SSO provider and Discord ingress security pages are current.
+
+This chapter will contain authentication, authorization, SSO, secrets, RBAC, and security-control guidance for administrators.
+
+## Planned pages
+
+- [`sso-providers.md`](sso-providers.md) — current provider configuration, discovery, callbacks, and failure modes.
+- [`discord-ingress.md`](discord-ingress.md) — current Discord service authentication, allowlists, bindings, roles, replay, and failure controls.
+- `secrets.md` — document general secret handling after source/configuration verification.
+- `rbac.md` — document roles and permissions from the canonical implementation.
+
+The current SSO page reflects dynamic provider discovery. The Discord page documents only the verified Discord compatibility boundary; it does not claim Telegram or Matrix parity. Do not revive retired root documents or add frontend feature flags that the web flow does not consume.
+
+## Related
+
+- [`Administrator guide`](../README.md)
+- [`API documentation`](../../API/README.md)
+- [[DEVELOPER-GUIDE/architecture/README|Architecture index]]