Developer documentation

Internal. Not filtered from customer retrieval by accident — every page here carries audience: internal, and that field is the filter.

Start here

• Documentation standards — the frontmatter contract and the three-section page
• AI indexing strategy — how these pages become retrievable
• Runbooks — what to do under pressure
• Architecture

The rules that are not negotiable

Pam drafts; named humans approve. No code path may approve, vote or decide.

Never a silent fallback from Bedrock to another provider. If Bedrock is unavailable, fail. Routing board papers elsewhere would break the confidentiality promise without anyone noticing.

No prompt or response text in logs. Model id, latency and token counts.

The audit log is append-only. Revoke users; never delete referenced ones.

Every tenant table carries RLS with FORCE, and the application role cannot bypass it. lib/db.ts refuses to start otherwise.