Initial ChronoSeal release

docs/ARCHITECTURE.md

@@ -0,0 +1,36 @@
+# ChronoSeal Architecture
+
+## Core Principles
+
+- Continuous browser attestation
+- Cryptographic heartbeat chains
+- WASM-isolated secrets
+- Behavioral entropy verification
+- Silent mitigation
+
+## Components
+
+### WASM Runtime
+
+Responsible for:
+- heartbeat generation
+- signature generation
+- entropy collection
+- VM execution
+
+### Server
+
+Responsible for:
+- session verification
+- trust scoring
+- chain validation
+- mitigation
+
+## Threat Model
+
+Designed to increase:
+- scraping cost
+- operational complexity
+- synchronization burden
+
+ChronoSeal does not attempt impossible perfect prevention.

docs/DEPLOYMENT.md

@@ -0,0 +1,36 @@
+# Deployment
+
+## Native
+
+```bash
+cargo build -p server --release
+sudo cp target/release/server /usr/local/bin/chronoseal
+```
+
+## systemd
+
+```bash
+sudo cp chronoseal.service /etc/systemd/system/
+
+sudo systemctl daemon-reload
+sudo systemctl enable chronoseal
+sudo systemctl start chronoseal
+```
+
+## Docker
+
+```bash
+docker compose up -d --build
+```
+
+## Reverse Proxy
+
+Recommended:
+- nginx
+- Nginx Proxy Manager
+- HAProxy
+
+Enable:
+- HTTP/2
+- TLS 1.3
+- aggressive timeout policies