Architecture decision records

• ADR 0001 - Real public datasets, never committed
• ADR 0002 - Carrying the CIS v8.2-era mapping forward to ATT&CK v19.2
• ADR 0003 - In-process graph engines, Neo4j optional
• ADR 0004 - Recommender cost model and ILP optimality check
• ADR 0005 - Mitigation-bridge auto-mapper
• ADR 0006 - FastAPI with a vanilla JS UI, localhost-only
• ADR 0007 - Rule-quality weighting of the defended score
• ADR 0008 - NIST SP 800-53 rev5 as a second control framework
• ADR 0009 - Cross-framework comparison and transfer evaluation

Figures in docs/figures/ are produced by benchmarks/*.py (see the main README).