docs: add DeepWiki badge and public Pages landing

CHANGELOG.md

@@ -7,6 +7,7 @@ All notable changes to OriginWeave are documented in this file. The format follo
 - Refreshed the product-gap queue to 126 open pull requests (54 ready, 72 draft) after #190, #188, #185, #192, #182, #184, #115, #181, #116, #117, #118, #183, #114, #127, #112, #109, #186, #110, #108, #111, #174, and #113 were merged into their immediate stacked prerequisites. PRs #147, #146, #145, #144, #143, #142, #141, #139, #136, #132, #129, and #128 moved to ready after exact-head checks and thread review; these are queue-consolidation results, not protected-main shipment.
 
 ### Added
+- Added the exact-cased Ask DeepWiki README badge and a bounded public documentation landing for product, architecture, safety, onboarding, releases, and publication-state navigation.
 - Corrected the 2026-08-26 product-gap snapshot with current #229 presentation-identity evidence, stacked-only #205 integration evidence, current base/head pairs, the 126-PR queue count, explicit root-versus-child merge ordering, and the active GitHub counted-approval gate.
 - Refreshed the product and technical gap baseline onto the 2026-08-26 live inventory: 126 open pull requests (54 ready, 72 draft), protected-main promotion of #168/#194/#196/#216/#151, a verified maintenance-loop record (supersession closure of #153, conflict reconciliations on #37/#149/#152/#173/#175, issue #212 option-(b) authorization on #43, Strix vuln-0001 homoglyph remediation on #124), provider-rerun outcome evidence, an organization review-pipeline congestion record, and refreshed merge-order queue guidance. Documentation evidence contracts were aligned to the same snapshot so the baseline, its dated markers, and the pinned exact-head rows cannot silently diverge.
 

README.md

@@ -1,5 +1,7 @@
 # OriginWeave
 
+[![Ask DeepWiki](https://deepwiki.com/badge.svg)](https://deepwiki.com/ContextualWisdomLab/OriginWeave)
+
 **Browse. Act. Prove.**
 
 OriginWeave is a Chromium-compatible, Rust-first control plane for governed AI agents on the web. It is designed to let an agent observe, extract, and act without turning untrusted page content into authority, exposing secrets to a model, connecting to an unapproved network destination, accepting an unauthenticated web service, or losing the evidence required to explain what happened.

docs/index.md

@@ -0,0 +1,41 @@
+# OriginWeave
+
+OriginWeave is a Chromium-compatible, Rust-first control plane for governed AI agents on the web. It separates trusted instruction, untrusted web observation, protected secrets, destination authority, browser action authority, and evidence so an agent can browse and act without turning page content into ambient control.
+
+> Status: pre-alpha. This page describes protected-default-branch product truth and intentionally does not promote active pull requests, queued checks, planned adapters, or unpublished release work to shipped capability.
+
+## Start here
+
+- [Repository overview](https://github.com/ContextualWisdomLab/OriginWeave#readme)
+- [Architecture and trust boundaries](https://github.com/ContextualWisdomLab/OriginWeave/blob/main/ARCHITECTURE.md)
+- [Product roadmap](product-roadmap.md)
+- [Architecture decisions](adr/README.md)
+- [Product and technical gap baseline](product-technical-gap-baseline.md)
+- [Repository releases](https://github.com/ContextualWisdomLab/OriginWeave/releases)
+- [Ask DeepWiki](https://deepwiki.com/ContextualWisdomLab/OriginWeave)
+- [Security policy](https://github.com/ContextualWisdomLab/OriginWeave/blob/main/SECURITY.md)
+- [Contributing](https://github.com/ContextualWisdomLab/OriginWeave/blob/main/CONTRIBUTING.md)
+
+## Product responsibility
+
+OriginWeave owns governed browser-agent control contracts: browser-equivalent origin identity, fail-closed typed action policy, resolved-destination authorization, exact direct TCP peer binding, authenticated TLS service identity, bounded resource governance, and credential-safe evidence/provenance primitives. These foundations are independently reusable while the complete Chromium/BiDi/CDP/HTTP/proxy/persistence adapter surface remains subject to protected-main integration evidence.
+
+The product does not treat successful parsing, DNS resolution, TCP connection, TLS authentication, browser protocol acknowledgement, or model output as interchangeable proof. Each boundary must preserve its own authority and evidence before a later layer can consume it.
+
+## Safety model
+
+OriginWeave treats page content and tool output as untrusted observations. They can contribute evidence, but they cannot grant capabilities, approve actions, rewrite policy, or request protected values. Destination admission is separate from name resolution; exact TCP peer evidence is separate from TLS identity; transport identity is separate from HTTP resource policy; and browser action acknowledgement is separate from an observed post-condition.
+
+See the root architecture document and accepted ADRs for the binding contracts and reversal paths.
+
+## Development and verification
+
+The repository pins its supported Rust toolchain and verifies formatting, locked workspace checks, tests, strict Clippy, rustdoc, and exact owned-production coverage through protected CI. Current-head checks and counted reviews are integration evidence; predecessor-head, skipped, queued, model-only, or active-PR results are not treated as shipped product proof.
+
+## Publication boundary
+
+GitHub Pages availability is a repository-facing deployment state, not a property of this source file alone. This landing becomes a published product surface only after protected integration, Pages configuration/deployment, and live HTTPS content verification succeed.
+
+## License
+
+OriginWeave source is licensed under the [Apache License 2.0](https://github.com/ContextualWisdomLab/OriginWeave/blob/main/LICENSE). Third-party dependencies retain their own license obligations.

tests/test_repository_contract.py

@@ -71,6 +71,22 @@ def test_required_architecture_and_governance_documents_exist(self) -> None:
         missing = sorted(path for path in required_paths if not (ROOT / path).is_file())
         self.assertEqual(missing, [])
 
+    def test_public_documentation_landing_stays_bounded_and_discoverable(self) -> None:
+        """The public landing must retain its badge, status, and publication boundary."""
+
+        readme = (ROOT / "README.md").read_text(encoding="utf-8")
+        landing = (ROOT / "docs/index.md").read_text(encoding="utf-8")
+
+        self.assertEqual(readme.count("[![Ask DeepWiki]"), 1)
+        self.assertIn(
+            "[![Ask DeepWiki](https://deepwiki.com/badge.svg)]"
+            "(https://deepwiki.com/ContextualWisdomLab/OriginWeave)",
+            readme,
+        )
+        self.assertIn("Status: pre-alpha", landing)
+        self.assertIn("## Publication boundary", landing)
+        self.assertIn("does not promote active pull requests", landing)
+
     def test_origin_identity_and_destination_safety_remain_distinct(self) -> None:
         """Documentation must never present origin parsing as an SSRF decision."""