Docs are close, but not fully up to date yet. Current docs status: Core docs set exists and is indexed in site-map.md. Permissions tooling implementation is current in: test.permissions.php test.perm.sh system.manager.php Docs are missing references to: test.permissions.php modes: test, fix, status test.perm.sh wrapper usage system.manager.php fixperms command restore-report.md exists but is not listed in site-map.md. Concise plan (tasks, phases, next steps): Phase 1: Docs alignment Update admin-guide.md, maintenance.md, debugging.md, and system-status.md with current permission command flows. Add restore report entry to site-map.md or archive it if no longer needed. Phase 2: Operational hardening Add a single canonical runbook section for install, selftest, fixperms, and diagnostics. Add expected exit codes for each tool command. Phase 3: Validation and signoff Execute full CLI test pass and capture output in test.out. Run quick UX pass on key pages and log issues in tasks.md. Next steps I can patch the docs now in one pass, then rerun tests and refresh test.out. UX validation checklist (manual): Home page renders and links work: Open aicode.index.php and verify links to API health, admin dashboard, debug dashboard, and system debug. API health usability: Visit public/api.php?action=health and confirm readable JSON plus timestamp. Admin dashboard role behavior: Open public/admin-dashboard.php?role=admin and ?role=invalid, confirm expected role display and invalid role message. Debug dashboard clarity: Open debug-dashboard.php and confirm debug flags are understandable. System integrity table readability: Open debug-system.php and verify path/status table is legible and complete. App debug action: Open debug-app.php and confirm response indicates log write. API tail fallback: Open api-tail.php and verify behavior both when log exists and when missing. CLI validation checklist: Environment check: php test.env.php Expect all checks OK and exit 0. Structure check: php test.structure.php Expect Structure test passed. Permissions test: php test.permissions.php test Expect Permissions test passed. Permissions status: test.perm.sh status Expect report with no mismatches. Permissions auto-fix: php system.manager.php fixperms Expect successful update or already-correct status. Standards check: php test.standards.php Expect Naming standards test passed. Full selftest: php system.manager.php selftest Expect Selftest passed. Diagnostics safety: php diagnostics.tools.php "SELECT 1 AS ok" Expect JSON response with ok result. Diagnostics guardrail: php diagnostics.tools.php "DELETE FROM users" Expect failure due to SELECT-only rule. Test output capture: Rebuild test.out with full suite and verify all exit codes are 0 except intentional guardrail test. If you want, I will do Phase 1 immediately and update the docs so they match current tooling exactly.