docs: freshness sweep and index consistency cleanup

Author: rwilliamspbg-ops

Documentation/Deployment/GENESIS_LAUNCH_GUIDE.md

@@ -364,7 +364,7 @@ docker compose up -d
 docker network inspect sovereign-genesis
 
 # Restart networking
-docker compose -f docker-compose.full.yml -f docker-compose.full.yml restart
+docker compose -f docker-compose.full.yml restart
 
 # Check firewall rules
 sudo ufw status
@@ -468,18 +468,18 @@ docker stats --no-stream
 
 ```bash
 # Graceful shutdown (recommended)
-docker compose -f docker-compose.full.yml -f docker-compose.full.yml down --remove-orphans
+docker compose -f docker-compose.full.yml down --remove-orphans
 
 # Force shutdown (if unresponsive)
-docker compose -f docker-compose.full.yml -f docker-compose.full.yml kill
-docker compose -f docker-compose.full.yml -f docker-compose.full.yml rm -f
+docker compose -f docker-compose.full.yml kill
+docker compose -f docker-compose.full.yml rm -f
 ```
 
 ### Network Recovery
 
 ```bash
 # 1. Stop all services
-docker compose -f docker-compose.full.yml -f docker-compose.full.yml down --remove-orphans
+docker compose -f docker-compose.full.yml down --remove-orphans
 
 # 2. Clean Docker state
 docker system prune -af --volumes
@@ -492,7 +492,7 @@ docker system prune -af --volumes
 
 ```bash
 # 1. Stop services
-docker compose -f docker-compose.full.yml -f docker-compose.full.yml down --remove-orphans
+docker compose -f docker-compose.full.yml down --remove-orphans
 
 # 2. Remove corrupted volumes
 docker volume rm prometheus_data grafana_data
@@ -501,7 +501,7 @@ docker volume rm prometheus_data grafana_data
 tar xzf prometheus-backup-*.tar.gz -C /var/lib/docker/volumes/
 
 # 4. Restart services
-docker compose -f docker-compose.full.yml -f docker-compose.full.yml up -d
+docker compose -f docker-compose.full.yml up -d
 ```
 
 ### Contact & Support

Documentation/Guides/GENESIS_QUICK_START.md

@@ -36,7 +36,7 @@ ls genesis-launch.sh      # Must exist
 
 | Service | URL | Credentials |
 |---------|-----|-------------|
-| **Grafana** | http://localhost:3001 | admin / admin |
+| **Grafana** | http://localhost:3001 | admin / ${GRAFANA_PASSWORD or GRAFANA_ADMIN_PASSWORD} |
 | **Prometheus** | http://localhost:9090 | - |
 | **Backend API** | http://localhost:8000 | - |
 | **Alertmanager** | http://localhost:9093 | - |
@@ -107,10 +107,10 @@ docker ps | grep node-agent | wc -l
 docker compose -f docker-compose.full.yml up -d --scale node-agent=50
 
 # Stop everything
-docker compose -f docker-compose.full.yml -f docker-compose.full.yml down --remove-orphans
+docker compose -f docker-compose.full.yml down --remove-orphans
 
 # Restart
-docker compose -f docker-compose.full.yml -f docker-compose.full.yml restart
+docker compose -f docker-compose.full.yml restart
 ```
 
 ---
@@ -152,7 +152,7 @@ docker compose -f docker-compose.full.yml restart backend
 
 **Common Issues**: See Troubleshooting section in full guide
 
-**Emergency**: Stop all services with `docker compose -f docker-compose.full.yml -f docker-compose.full.yml down --remove-orphans`
+**Emergency**: Stop all services with `docker compose -f docker-compose.full.yml down --remove-orphans`
 
 ---
 

Documentation/MASTER_DOCUMENTATION_INDEX.md

@@ -15,8 +15,8 @@ Current-branch canonical references:
 - [Windows Client EXE Build workflow](../.github/workflows/windows-client-exe.yml)
 - [macOS Client Smoke workflow](../.github/workflows/macos-client-smoke.yml)
 
-- Total indexed files: 269
-- Indexed on: 2026-04-07 00:00 UTC
+- Total indexed files: 271
+- Indexed on: 2026-04-08 00:00 UTC
 
 ## Category Index
 
@@ -168,7 +168,7 @@ Current-branch canonical references:
 - [NPU_PERFORMANCE_SCALING_COMPLETE.md](/Documentation/Performance/NPU_PERFORMANCE_SCALING_COMPLETE.md)
 - [RELEASE_NOTES_TPM_NPU_2026-03-03.md](/Documentation/Performance/RELEASE_NOTES_TPM_NPU_2026-03-03.md)
 
-### Security & Compliance (11)
+### Security & Compliance (13)
 
 - [.github/CODEQL.md](../.github/CODEQL.md)
 - [.github/SECURITY.md](../.github/SECURITY.md)
@@ -178,6 +178,8 @@ Current-branch canonical references:
 - [API_AUTH_TOKEN_ROTATION_RUNBOOK.md](/Documentation/Security/API_AUTH_TOKEN_ROTATION_RUNBOOK.md)
 - [DISABLE_DEFAULT_CODEQL.md](/Documentation/Security/DISABLE_DEFAULT_CODEQL.md)
 - [LINT_SECURITY_FIXES.md](/Documentation/Security/LINT_SECURITY_FIXES.md)
+- [QUANTUM_KEX_DRILL_RETENTION_POLICY.md](/Documentation/Security/QUANTUM_KEX_DRILL_RETENTION_POLICY.md)
+- [QUANTUM_KEX_ROTATION_DRILL_RUNBOOK.md](/Documentation/Security/QUANTUM_KEX_ROTATION_DRILL_RUNBOOK.md)
 - [SECURITY_AUDIT_2026-02-28.md](/Documentation/Security/SECURITY_AUDIT_2026-02-28.md)
 - [audit_results/20260219/2026-02-17_10M_Node_Success/SUMMARY.md](../audit_results/20260219/2026-02-17_10M_Node_Success/SUMMARY.md)
 - [audit_results/20260219/BFT_ATTACK_FEB_2026.md](../audit_results/20260219/BFT_ATTACK_FEB_2026.md)

Documentation/Security/QUANTUM_KEX_ROTATION_DRILL_RUNBOOK.md

@@ -118,7 +118,7 @@ Evidence bundle path: artifacts/quantum-kex-rotation/<drill-id>/
 - If reconciliation fails, stop public messaging and open incident triage before rerun.
 
 ## Retention and Compliance
-- Canonical policy: [Documentation/Security/QUANTUM_KEX_DRILL_RETENTION_POLICY.md](Documentation/Security/QUANTUM_KEX_DRILL_RETENTION_POLICY.md)
+- Canonical policy: [QUANTUM_KEX_DRILL_RETENTION_POLICY.md](QUANTUM_KEX_DRILL_RETENTION_POLICY.md)
 - Treat each bundle as immutable security evidence for at least 2555 days.
 - Validate `checksums.sha256` before and after archival transfer.