- ARCHITECTURE.md — module layout and the non-custodial write path
- API.md — endpoint summary
- DATABASE.md — schema and migrations
- TESTING.md — test suite notes
- DEPLOYMENT.md — deployment checklist
- GLOSSARY.md — terminology
- FAQ.md — frequently asked questions
- AUTHENTICATION.md — JWT and password hashing
- NON_CUSTODIAL.md — why the build/sign/submit pattern exists
- VALIDATION.md — DTO validation approach
- ERROR_HANDLING.md — exception handling
- OBSERVABILITY.md — logging/metrics gaps
- RATE_LIMITING.md — known gap
- CORS.md — allowed origins
- CONFIGURATION.md — environment variables
- PRISMA_7_NOTE.md — why Prisma is pinned to 6.x