SECURITY-READINESS-SAMPLE-BRIEF (Pilot Proof Asset) & DASHBOARD-INITIAL-SHELL-PERFORMANCE (Performance)

Release digest

SECURITY-READINESS-SAMPLE-BRIEF (Pilot Proof Asset) — Added a synthetic Security Readiness Brief page at /security-readiness/sample-brief/ with explicit fictional-project, non-audit, and no-private-secret boundaries plus a dedicated pilot CTA source for sample-brief intent.

DASHBOARD-INITIAL-SHELL-PERFORMANCE (Performance) — Removed framer-motion from the dashboard landing shell, sidebar, route wrapper, and floating chat widget; removed automatic heavy-route idle prefetching; and kept dashboard preview video loading behind user action so /app/ avoids pulling motion, PDF, canvas, and video assets during initial render.
DOCS-ASSET-CACHE-HEADERS (Performance) — Added immutable cache headers for fingerprinted Docusaurus assets and short-lived cache headers for docs discovery files served by the knowledge-base nginx image.
PUBLIC-HEADER-MOBILE-CTA (Mobile UX) — Fixed the public shell CTA wrapper so the desktop pilot button stays hidden on mobile instead of overriding the responsive hidden class.

Added regression coverage for the sample brief route, sitemap and llms.txt discovery, bounded sample CTA analytics source, docs static cache headers, and the dashboard initial-shell no-motion/no-auto-prefetch contract.
Verified dashboard lint/build, docs-site lint/build, knowledge-base build and SEO checks, local /app/ desktop/mobile browser smoke, and pre-push checks after changelog freshness was updated.
Public documentation decision: public-facing docs were updated through the new sample brief route, sitemap, and llms.txt. No knowledge-base article is required for this slice because the sample brief is a pilot conversion proof asset and the product documentation contract, data-source behavior, legal boundary, pricing, auth, billing, and retention policies are unchanged.