docs: expand ADRs 0001–0007 and rewrite buyer README

[seonghobae]

Documentation-only. Not stacked on #103, #83, #100, or #101. Base is live main at ce207dfd42975db61c82a5963e206fc1db14ac2b.

What this is

• Rewrites README.md as a customer/operator page: what Keyverse is, how to run this repo alone, how an RP calls published OIDC/OAuth/SCIM contracts, and where ADRs and standards live.
• Removes the hourly OpenCode / bot-loop section and the “Generated with Claude Code” footer from the buyer README (those procedures stay in docs/operations/hourly-product-development.md).
• Expands the thin accepted ADRs 0001–0007 in place (same decisions, still Accepted) with Context / Decision / Consequences / APA 7th references.
• Adds docs/REFERENCES.md as the shared bibliography for those expansions.
• Does not edit ADR 0008. Does not create ADR 0009–0012 (owned by Add account-derived LineageWeave RP profile #100 / feat(authorization): hierarchical PDP, start-login helper, and PATs #103).

What this is not

• No runtime, realm, Helm, lockfile, workflow, CODEOWNERS, Semgrep, or security-gate change.
• No merge, approve, or review-comment deliverable.
• Citations are draft until an independent researcher re-verifies the opened official URLs/DOIs.

Product cuts recorded

• Keyverse is the CWL identity leaf/hub and boots from this repo’s Compose/Helm.
• naruon and gyeot may call this leaf; sibling checkouts are not required.
• Orgmetra owns employment/org-tree truth; Keyverse does not copy those tables.
• Authorized identity data stays usable under purpose-bound access control, encryption, and audit. No masking prescription.

OAuth 2.1 note

OAuth 2.1 was opened as IETF Internet-Draft draft-ietf-oauth-v2-1-15 (work in progress) and is not cited as a final RFC. Official records used are RFC 6749, RFC 8252, RFC 7636, and RFC 9700.

  

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 97ee1a91-2687-4fdc-a1eb-e16c758bf955

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}