docs: tighten org front-door value and claim boundaries

[raylee-hawkins]

Summary

• Tightens the .github organization front door around the AI Security Operations control-plane framing.
• Adds a short reviewer-first 10-second read.
• Moves reviewer route links higher.
• Clarifies that validation, proof records, and human review authorize claims.
• Reinforces that Website/GitHub rendering is not proof and blocked claims are an intentional claim firewall.

Scope

Changed only:

• profile/README.md
• profile/START_HERE.md

Proof boundary

No proof state, runtime state, workflows, validators, detection logic, ledger files, proof records, website app code, or GitHub Projects were changed. Runtime-active, signal-observed, production, SOCaaS, autonomous SOC, AI-approved disposition, analyst-approved disposition, and public-safe runtime claims remain blocked unless separately proven.

Validation

• git diff --check
• private/local path scan
• patent-pending scan
• promoted-claim context scan
• blocked-claim wording scan
• python scripts/verify-command-center-invariants.py
• changed-file scope gate

[raylee-hawkins]

Reviewer / operator packet

Scope:

• Repo: HawkinsOperations/.github
• Branch: docs/github-value-front-door-v1
• Changed files only:
  • profile/README.md
  • profile/START_HERE.md

Validation run before commit:

• git diff --check: pass, with Windows LF-to-CRLF warnings only
• private/local path scan over changed files: pass
• patent-pending scan over changed files: pass
• blocked-claim wording scan: pass; blocked phrases remain bounded or inside blocked-claim register sections
• promoted-claim context scan: pass
• python scripts/verify-command-center-invariants.py: pass, COMMAND_CENTER_INVARIANTS=PASS, checked_files=18
• changed-file scope gate: pass; only approved Markdown files changed

Proof boundary:

• This PR changes reviewer/front-door wording only.
• No proof state, runtime state, workflows, validators, detection logic, ledger files, proof records, website app code, GitHub Projects, releases, tags, repo settings, branch protection, or secrets were changed.
• Runtime-active, signal-observed, production, SOCaaS, autonomous SOC, AI-approved disposition, analyst-approved disposition, and public-safe runtime claims remain blocked unless separately proven.

Merge boundary:

• PR opened for review only.
• No merge performed.