feat: Principal-level portfolio upgrade

Major enhancements to transform repo from research project to hireable portfolio piece:

README Overhaul:
- Executive brief with Who/Problem/Solution/KPIs
- 60-second quick demo section
- Evaluation results table with α tradeoffs
- Score distribution visualization
- Architecture diagram (ASCII)
- CI badges

Principal Program Artifacts (/docs):
- PRD.md: Problem, users, metrics, non-goals
- Architecture.md: Sequence diagrams, data flow, components
- Risks.md: Full risk register with mitigations
- Roadmap.md: MVP → Beta → GA with exit criteria
- Decision-log.md: 10 key technical decisions with rationale

Golden Demo Path:
- demo.py: Offline demo (no API key required)
- Makefile: dev shortcuts (demo, test, lint, dashboard)

Engineering Hygiene:
- .github/workflows/ci.yml: Lint, test, security scan
- pyproject.toml: Modern Python packaging
- tests/test_scorer.py: 24 unit tests for edge cases

Addresses feedback:
- Outcomes page with metrics ✓
- Demo friction reduced to <60 seconds ✓
- Principal-grade artifacts added ✓
- CI/test infrastructure ✓

Author: LEDazzio01

.github/workflows/ci.yml

@@ -0,0 +1,99 @@
+name: CI
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+jobs:
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.10'
+      
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install flake8
+      
+      - name: Run flake8
+        run: |
+          flake8 *.py tests/ --max-line-length=120 --ignore=E501,W503 --count --show-source --statistics
+
+  test:
+    name: Test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.10'
+      
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install -r requirements.txt
+          pip install pytest pytest-cov
+      
+      - name: Install Bandit
+        run: pip install bandit
+      
+      - name: Run tests
+        run: |
+          pytest tests/ -v --cov=. --cov-report=xml --cov-report=term-missing
+      
+      - name: Upload coverage to Codecov
+        uses: codecov/codecov-action@v4
+        with:
+          files: ./coverage.xml
+          fail_ci_if_error: false
+        continue-on-error: true
+
+  demo:
+    name: Demo Smoke Test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.10'
+      
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install bandit
+      
+      - name: Run offline demo
+        run: |
+          python demo.py
+
+  security:
+    name: Security Scan
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.10'
+      
+      - name: Install Bandit
+        run: pip install bandit
+      
+      - name: Run Bandit on source
+        run: |
+          bandit -r . -x ./tests --severity-level medium --confidence-level medium -f json -o bandit-report.json || true
+          bandit -r . -x ./tests --severity-level medium --confidence-level medium
+        continue-on-error: true

Makefile

@@ -0,0 +1,72 @@
+# Makefile for Assured Sentinel
+# Provides common development commands
+
+.PHONY: help install demo calibrate dashboard test lint clean
+
+# Default target
+help:
+	@echo "Assured Sentinel - Available Commands"
+	@echo "======================================"
+	@echo ""
+	@echo "  make install     - Install dependencies"
+	@echo "  make demo        - Run offline demo (no API key needed)"
+	@echo "  make calibrate   - Run calibration to generate threshold"
+	@echo "  make dashboard   - Launch Streamlit dashboard"
+	@echo "  make test        - Run unit tests"
+	@echo "  make lint        - Run linting (flake8)"
+	@echo "  make clean       - Remove generated files"
+	@echo ""
+
+# Install dependencies
+install:
+	pip install -r requirements.txt
+
+# Run offline demo (no API key required)
+demo:
+	python demo.py
+
+# Run calibration
+calibrate:
+	python calibration.py
+
+# Launch dashboard
+dashboard:
+	python -m streamlit run dashboard.py
+
+# Run with LLM (requires Azure OpenAI)
+run:
+	python run_day5.py
+
+# Run tests
+test:
+	pytest tests/ -v
+
+# Run tests with coverage
+test-cov:
+	pytest tests/ --cov=. --cov-report=term-missing --cov-report=html
+
+# Lint code
+lint:
+	flake8 *.py tests/ --max-line-length=120 --ignore=E501,W503
+
+# Type checking (if mypy is installed)
+typecheck:
+	mypy *.py --ignore-missing-imports
+
+# Clean generated files
+clean:
+	rm -f calibration_data.pkl
+	rm -rf __pycache__
+	rm -rf .pytest_cache
+	rm -rf htmlcov
+	rm -rf .coverage
+	find . -name "*.pyc" -delete
+	find . -name "__pycache__" -type d -delete
+
+# Full CI check (lint + test)
+ci: lint test
+	@echo "CI checks passed!"
+
+# Quick verification of a code snippet (usage: make verify CODE="print('hello')")
+verify:
+	@python -c "from commander import Commander; c = Commander(); print(c.verify('''$(CODE)'''))"