Core concepts

The toolkit is small but opinionated. Three ideas explain almost everything:

1. Hexagonal core - the domain depends only on PSR interfaces, so the same logic runs on any framework. See Architecture.
2. Hard facts vs. advisory opinion - deterministic Checks produce a VerificationReport of facts; a RiskStrategy turns that into an advisory RiskAssessment. See Domain model and Verification flow.
3. Capability-aware extension - registries and providers are drivers behind one shared manager; you extend by adding a driver, not by editing the core.

Read these three pages once and the rest of the docs (registries, risk, AI, bridges) will fall into place.

---

Table of contents

• Architecture
• Domain model
• Verification flow