System-of-record map for coop. The root CLAUDE.md is the
short navigational entrypoint; durable detail lives here.
ARCHITECTURE.md— module map, the two-backend design, host→guest data flow, architectural invariants.trust-model.md— trust boundaries, taint sources, secret handling,coop updateverification. The authoritative security spec thereview-securityagent reads. (Disclosure policy isSECURITY.md.)code-style.md— Rust authoring idioms and the review / authoring checklists.testing.md— integration tests, mutation testing (+.cargo/mutants.tomlscoping and baselines), fuzzing, kani.platform-notes.md— Firecracker CI-kernel workarounds, Docker networking, scp~caveat, tracing-to-stderr.
getting-started.md— install and first VM.commands.md— everycoopsubcommand.configuration.md—config.tomlreference.backends.md— Lima (macOS) and Firecracker (Linux) setup.images-and-profiles.md,workspaces.md,multi-instance.md,devcontainer.md,vscode.md,shell-completion.md.claude-integration.md,codex-integration.md— agent integration.json-output-design.md— the--jsondesign (a good precedent for design-doc style).
agents/review-*.md— single-lens PR review sub-agents.commands/—my-review,babysit-pr,babysit-my-prs,integration.skills/—closeout-review(pre-PR gate),mutation-check.hooks/+settings.json— the closeout gate,cargo fmtformatter, the no-pipe-test-output guard, and the read-only Bash allowlist.