The section was frozen at the pre-bootstrap state — it claimed the
workspace was "not yet bootstrapped", referenced ADRs only up to 0020,
and instructed future agents to scaffold the repo before running any
command. Reality: workspace is operational, phase-1 and phase-2 are
shipped on main, 21 ADRs are accepted, phase-3a admin app is in
skeleton state.
Rewrites the section to reflect current state, lists what's shipped vs
what's still on the roadmap, and disambiguates ADR-0021 (implementation
-level security baseline, accepted) from the still-paused strategic
security baseline awaiting RSSI input on ASVS / HDS / GDPR / NIS 2.
Julien Gautier