docs: add OpenWiki codebase documentation

Author: cport1

.openwikiignore

@@ -0,0 +1,36 @@
+# Secrets and local configuration
+.env
+.env.*
+!.env.example
+!*.env.example
+*.pem
+*.key
+*.crt
+*.log
+
+# Dependencies, generated output, caches, and local tooling
+node_modules/
+**/node_modules/
+dist/
+**/dist/
+build/
+**/build/
+coverage/
+**/coverage/
+.next/
+**/.next/
+out/
+**/out/
+.turbo/
+**/.turbo/
+.git/
+.idea/
+.vscode/
+packages/webdecoy/output/
+
+# Local operating-system files
+.DS_Store
+Thumbs.db
+*.swp
+*.swo
+

AGENTS.md

@@ -146,3 +146,16 @@ two.
 
 In monitor mode this is the only place the verdict surfaces, so an app that
 wants to log or meter denials reads it here.
+
+<!-- OPENWIKI:START -->
+
+## OpenWiki
+
+This repository has a generated `openwiki/` evidence index. It is optional just-in-time context, not required startup reading.
+
+- Treat source code and tests as authoritative. A brief's unknowns and review items are verification gaps, not automatic requirements.
+- Prefer the narrowest quiet validation that proves the changed behavior. Preserve complete failure output.
+
+OpenWiki updates are run manually with `OPENWIKI_TELEMETRY_DISABLED=1 openwiki --update`. Do not hand-edit generated OpenWiki pages unless explicitly asked; prefer updating source code/docs and regenerating the wiki.
+
+<!-- OPENWIKI:END -->

CLAUDE.md

@@ -0,0 +1,7 @@
+<!-- OPENWIKI:START -->
+
+## OpenWiki
+
+See [AGENTS.md](AGENTS.md) for OpenWiki agent instructions.
+
+<!-- OPENWIKI:END -->