added product page

README.md

@@ -25,6 +25,8 @@ npm run check     # Astro + TypeScript check
 | `src/components/home/*` | One file per home section, in page order: Hero, Manifesto, Method (with `MethodDiagram`), Stages (with `GridObject`), Sectors, Proof, Quote, Insights, Contact. |
 | `src/components/home/GridObject.astro` | The four wireframe objects on the stage cards (sphere, cube, plane, wave). Geometry is computed at build time; single stroke in `--ink`. |
 | `src/components/home/MethodDiagram.astro` | The four-stage loop, wide and tall compositions. Labels come from `ui.method.stages`. |
+| `src/components/verifier/*` | The CipherVerifier product page, in page order: Hero (line burst), Intro (image band), HowItWorks (tabs, one schematic per group), Cards, Facts, Outro. |
+| `src/components/verifier/diagrams.ts` | The five schematics as data: a hand-placed wide layout and an auto-generated tall spine per group. `Schematic.astro` renders either. Labels come from `ui.verifier.how.groups`; the tuple shape is in `types.ts`. |
 | `scripts/*.mjs` | Review tooling: `shot.mjs` (full page), `scroll-shots.mjs` (viewport by viewport), `tabs-test.mjs` (keyboard test for the sectors tabs), `contact-sheet.mjs`. Need `npx astro preview --port 4322`. |
 | `src/pages/_*.astro` | Shared page bodies. `index.astro` and `de/index.astro` render `_Home.astro` with a `lang` prop, and so on. |
 | `src/assets/images/` | Source images. Astro emits AVIF with a WebP fallback and explicit dimensions. |
@@ -32,7 +34,7 @@ npm run check     # Astro + TypeScript check
 
 ## Routes
 
-`/`, `/team`, `/insights`, `/insights/<slug>`, `/imprint`, `/privacy`, `/404` and the same under `/de`.
+`/`, `/cipherverifier`, `/team`, `/insights`, `/insights/<slug>`, `/imprint`, `/privacy`, `/404` and the same under `/de`.
 `hreflang` alternates and a sitemap are generated. The language switch sits in the footer.
 
 ## Things the host has to provide
@@ -70,8 +72,30 @@ objects on the stage cards were prototyped as a Magnific sheet
 (https://www.magnific.com/app/creation/aFsD5crfSh) and then rebuilt as procedural SVG so the
 stroke matches the rest of the site.
 
+## Product page
+
+`/cipherverifier` describes the pipeline in `product_repo/monocipher` (mounted for reference, ignored
+by git). Everything on the page was read from that repository on 18 September 2026:
+
+- The five stages and their order come from `orchestrator/pipeline_plan.py`.
+- The seventeen analysers are rayfusion's built-in plugins plus converters; the fourteen languages
+  are the `Technology` enum in `rayfusion/plugins/base.py`. The security profile is described in
+  `docs/rayfusion-rule-policy.md`.
+- The two-stage classification, escalation rules, budgets and replay-validated cache are from
+  `docs/polygraph-classification-pipeline.md`.
+- 970 is the number of entries in `sarifcombiner/cwe_information.json`.
+- SBOM merging (Syft and cdxgen, package-URL deduplication, CycloneDX 1.6) is `spectograph/backend`,
+  Dependency-Track upload and the ephemeral container are `deptrace/commands`.
+- Git providers, archive upload, CI webhook, scoped settings, live pipeline, PDF report and artefacts
+  are the `cipherverifier` Django app; the installer is `cvm`.
+
+When the product changes, update `ui.verifier` (copy and diagram labels) and, if a stage or tool is
+added, the layouts in `diagrams.ts`. Run `node scripts/tabs-shots.mjs <url> <prefix> '[data-how]'`
+to render every schematic for review.
+
 ## Interaction
 
-Two islands of script: the mobile navigation toggle in `Header.astro` and the sectors tabs in
-`Sectors.astro` (ARIA tablist, arrow keys, Home and End). Without JavaScript every sector panel
+Two islands of script: the mobile navigation toggle in `Header.astro` and the tab lists in
+`Sectors.astro` and `HowItWorks.astro`, which share `src/scripts/tabs.ts` (ARIA tablist, arrow
+keys, Home and End). Without JavaScript every sector panel
 and its image is shown in full; the `html.js` class set in `Base.astro` switches to one at a time.