[brunovicco]

Summary

This docs-only change makes current governed-runtime scope boundaries explicit and streamlines the repository landing pages for faster portfolio review.

README alignment

• replaces the Portuguese landing page with the revised PT-BR version and keeps README.md semantically aligned in English;
• shortens both landing pages while preserving the core architecture, security model, benchmark evidence, MCP boundary, quickstart, and canonical documentation links;
• corrects the prompt-injection claim so the README states that successful injection does not create additional authority by itself, while still acknowledging that proposals within legitimately granted authority can execute;
• states that current single-use/revocation approval guarantees belong to the controlled single-process provider;
• keeps the latest published release (v1.3.0) distinct from post-v1.3 hardening on current main.

New accepted boundary ADRs

• ADR 0009 — Tamper-evident execution evidence;
• ADR 0010 — Approval authority is single-process;
• ADR 0011 — Uncertain external side effects: idempotency and reconciliation;
• ADR 0012 — Exact-scope authorization and the external PDP boundary.

These ADRs document current limits, intended future designs, and explicit revisit triggers. They do not claim that signing/hash chaining, distributed approval, reconciliation, idempotency, or an external PDP are already implemented.

Scope

Exactly six documentation files differ from main:

• README.md;
• README.pt-br.md;
• docs/adr/0009-tamper-evident-execution-evidence.md;
• docs/adr/0010-approval-authority-is-single-process.md;
• docs/adr/0011-uncertain-external-side-effects-idempotency-and-reconciliation.md;
• docs/adr/0012-exact-scope-authorization-and-external-pdp-boundary.md.

No production code, dependencies, workflows, benchmark artifacts, tags, or published release metadata are changed.

Closes #192