[devXyi]

Summary

• Document the air-gap control-plane prototype: per-operator authentication, signed-bundle import, rollback/hash verification, Ed25519-signed hash-chain ledger, internal engine routing, and no-network test coverage.
• Replace the Raksha roadmap-only section with implemented prototype details: STIX 2.1, TAXII 2.1 read-only API, CISA KEV / FIRST EPSS / GDELT / NASA FIRMS parsers, ABAC, transparent uncalibrated scoring, cascade simulation, and back-test harness.
• Add test totals recorded in docs/AUDIT_FIXES.md, with caveats distinguishing the authoring-sandbox record from this PR's CI.
• Correct Healtho status to planned and avoid claiming that unverified deployments are live.

Validation

• Re-fetched the README and checked balanced expandable HTML sections.
• Confirmed no script tags, existing API/security/licensing sections preserved, and Raksha / air-gap limitations explicitly stated.
• Raksha uses synthetic fixtures in the documented tests; live feeds and score calibration are not claimed.
• Air-gap functionality is a tested prototype, not a certification or proof that every deployment is physically disconnected.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.