Data room: what exists and what does not

Read back 2026-09-29. Every link below points at a file that existed in the repository when this page was built. Rows that are missing are listed with the owner and a target date, not hidden.

Available now

DocumentLocation
Release record and readback transcriptdocs/RELEASE_STATUS.md
evidence/v5_0_1_release_readback_2026-09-24.md
Claims register and refused claimsdocs/CLAIMS_MATRIX.md
docs/institutional/UNSUPPORTED_CLAIMS.md
Defect registry and founder-only actionsdocs/REGISTRY.md
docs/REGISTRY_HUMAN_PACK.md
Security policy and threat modelSECURITY.md
docs/security/THREAT_MODEL.md
Third-party licencesLICENSE-THIRD-PARTY.md
Audit-readiness package and control mappingsdocs/compliance/AUDIT_READINESS.md
docs/compliance/COMPLIANCE_MAPPING.md
Maintainer handbook (continuity, escrow contents)docs/MAINTAINER_HANDBOOK.md
Licences and pricing hypothesesLICENSE
COMMERCIAL.md
docs/commercial/ENTERPRISE_PRICING_GUIDE.md
Benchmarksevidence/benchmarks/benchmarks_5.0.1_2026-09-24.json
docs/BENCHMARKS.md
Verify-it-yourself kittools/sales/prove_it/prove_it.py
docs/PROVE_IT.md
Commercialization execution baselinedocs/commercial/EXEC_BASELINE.md

Not yet available

These need a person outside the software to act: counsel, an auditor, a signatory or a customer. Target dates are plans, not commitments.

DocumentRegister itemOwnerTarget
Penetration-test reportREG-H01Founder, then maintainerSOW 2027-03-31; report 2027-06-30
SOC 2 reportREG-H02Founder and auditorauditor engaged 2027-08-31; report 2027-12-31
Escrow agreementREG-H03Founder2027-03-31
Customer contracts, LOIs, executed support or services agreementREG-H06Founder2027-05-31 to 2027-09-30
Buyer interview notesREG-H06Founder2027-01-31
Legal opinions: licence, AI-authorship copyright, MiFID/MAR inputsREG-H04, REG-H10Counsel2027-01-31
Corporate formation and IP assignmentREG-H09Founder and counsel2027-01-31

Source of this list: docs/commercial/EXEC_BASELINE.md section 3.