feat: add remote workspaces and verified deliverables

README.md

@@ -11,6 +11,8 @@ A conversation may be upgraded from Chat to Work. The upgrade is intentionally
 one-way so that two independent Agent loops never compete for the same
 conversation state.
 
+The production instance is available at <https://agent.k1412.top>.
+
 ## Architecture
 
 ```text
@@ -26,7 +28,7 @@ Agent Runtime (model gateway + Work loop)
 Workspace Gateway (identity, policy, audit)
   |
   v
-one Docker workspace per Open WebUI user
+one Docker workspace per Open WebUI user on a dedicated execution host
 ```
 
 Open WebUI is pinned and lightly patched. Its model picker is replaced by two
@@ -99,6 +101,19 @@ High/Critical image vulnerabilities, with:
 ./scripts/audit-images.sh
 ```
 
+Generated files are available from the **工作区文件** button beside the mode
+selector. Users can browse directories, download one file, or download the
+current directory as a `.tar.gz` archive. Browser requests are authenticated by
+Open WebUI and re-signed for the Workspace Gateway; no internal key is exposed.
+
+## Documentation
+
+- [Architecture and Agent loop](docs/architecture.md)
+- [Open WebUI integration](docs/openwebui-integration.md)
+- [Infrastructure map](docs/infrastructure.md)
+- [Operations runbook](docs/operations.md)
+- [Security model](docs/security.md)
+
 ## Deployment
 
 Production uses immutable `linux/amd64` images in
@@ -106,11 +121,18 @@ Production uses immutable `linux/amd64` images in
 service networking, and a single public HTTPS entry at
 `https://agent.k1412.top`.
 
-See [docs/architecture.md](docs/architecture.md) and
-[docs/security.md](docs/security.md).
+User workspaces run through SSH on a dedicated Docker host; application and
+database services remain on the NAS.
 
-## Open WebUI attribution
+## License and Open WebUI attribution
 
 The web service is derived from Open WebUI v0.9.6. Open WebUI's copyright,
-license, name, and user-facing attribution are retained. See
+license, and attribution remain under the upstream Open WebUI License. K1412's
+original Runtime, Gateway, deployment, tests, and documentation are Apache-2.0.
+This is therefore a mixed-license source repository; the Open WebUI-derived web
+layer is not relicensed as Apache-2.0.
+
+The production deployment uses Open WebUI's branding-removal exception for
+installations with at most 50 end users in a rolling 30-day period. Public
+builds retain upstream branding by default. See
 [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md).