diff --git a/PUBLIC_SOURCE_EXPORT.md b/PUBLIC_SOURCE_EXPORT.md
index d40df2c..d9d2f48 100644
--- a/PUBLIC_SOURCE_EXPORT.md
+++ b/PUBLIC_SOURCE_EXPORT.md
@@ -1,3 +1,3 @@
 # Public source export
 
-This source snapshot was generated from the private canonical repository at revision `148cdd7d8885f4338d98b1623d38679311c68104`. It contains no private Git history or operational evidence. Changes are published from the canonical repository.
+This source snapshot was generated from the private canonical repository at revision `883ef812ee04516208b84972195b5e2a46207e44`. It contains no private Git history or operational evidence. Changes are published from the canonical repository.
diff --git a/PUBLIC_SOURCE_MANIFEST.json b/PUBLIC_SOURCE_MANIFEST.json
index c3d137d..81c5364 100644
--- a/PUBLIC_SOURCE_MANIFEST.json
+++ b/PUBLIC_SOURCE_MANIFEST.json
@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "sourceRevision": "148cdd7d8885f4338d98b1623d38679311c68104",
+  "sourceRevision": "883ef812ee04516208b84972195b5e2a46207e44",
   "files": [
     {
       "path": ".config/dotnet-tools.json",
@@ -74,8 +74,8 @@
     },
     {
       "path": "README.md",
-      "sha256": "4fe9cff0252194b559e170cf4434b4baf984a0bfcf937aaa736d927625377529",
-      "bytes": 5283
+      "sha256": "f96c14c96b82be0cda9a3b10638a88e3d8507346a62360a9e8b7924dc19d144e",
+      "bytes": 6085
     },
     {
       "path": "SECURITY.md",
diff --git a/README.md b/README.md
index 5129d86..32a6f57 100644
--- a/README.md
+++ b/README.md
@@ -48,6 +48,12 @@ secrets, persist every documented data volume and test restore before relying on
 backup. Start from the reviewed [Docker Compose configuration](docker-compose.yml) and
 the [backup/restore guide](docs/guides/back-ups-herstel-en-unraid-beheer.md).
 
+## Organize your first knowledge space
+
+After first-run owner setup, create a small page, edit its Markdown and inspect the saved revision. Add a project dossier when you need structured decisions and runbooks, then test search with words from your own content. Keep drafts distinct from published reference material.
+
+For LeafWiki migration, review the import preflight and conflicts before execution; retain the import identifier for validation and rollback. The source snapshot stays read-only. External applications should use a separately scoped service account rather than the owner's browser credentials.
+
 ## Architecture
 
 ```text
@@ -69,6 +75,8 @@ truth, and attachments are stored by SHA-256 outside the database.
 
 ## Development and verification
 
+Backend development uses the .NET SDK pinned in `global.json` (10.0.302, with `latestFeature` roll-forward). The container build supplies its own SDK; host SDK tooling is for development.
+
 ```bash
 corepack pnpm install --frozen-lockfile
 node scripts/verify.mjs --fast