For developers

Building Nullhawk, extending it, or understanding how it enforces its guarantees. These live in the repository's docs/ directory (linked to GitHub so they stay single-sourced).

Architecture & guarantees

• Architecture — crate layout and where invariants are enforced.
• Security invariants — the rules the codebase does not break.
• Threat model — hostile targets, extensions, local attackers, and the limits.
• Storage — why bodies are content-addressed and kept out of the database.

Building & contributing

• Development — building, testing, conventions, and the Windows build traps.
• Dependencies — dependency, audit, and secret-scanning policy.
• Extensions — the manifest format, host ABI, and capability model for writing an extension.

Release & operations

• Release — the signed, licensed release ceremony.
• Licensing keys — the issuer keypair and signing flow.
• CI integration — the reusable GitHub Action and SARIF wiring.
• Licensing — the canonical free/Pro/Enterprise gate audit.

Roadmap & positioning

• Roadmap — what exists, what's next, and why, in order.
• Feature parity — the Burp / Caido / ZAP matrix and competitive position.
• Coverage — the OWASP WSTG / API Top 10 methodology and the assist-tier backlog.