# Documentation Index

# Drop Documentation Index

> Last updated: 2026-02-17 | Validated: 20/20 PASS after doc alignment audit

## Backend

| Document | Description |
|----------|-------------|
| [API Reference](backend/API-REFERENCE.md) | All 26 API endpoints — method, path, request/response, auth, rate limits |
| [Database Schema](backend/DATABASE-SCHEMA.md) | All 19 tables (12 core + 7 compliance) — columns, types, constraints, indexes |
| [Authentication](backend/AUTHENTICATION.md) | JWT auth flow — register, login, refresh, logout, middleware |
| [Services](backend/SERVICES.md) | External integrations — Sumsub (KYC) `[PRODUCTION]`, Stripe (Cards) `[MOCK]`, Swan `[DEPRECATED]` |
| [Middleware](backend/MIDDLEWARE.md) | Auth, validation, rate limiting, CSRF, error handling |
| [Feature Flags](backend/FEATURE-FLAGS.md) | 8 feature flags, 16 tracked features, server/client APIs |

## Frontend

| Document | Description |
|----------|-------------|
| [Component Inventory](frontend/COMPONENT-INVENTORY.md) | All components — custom, icons, shadcn/ui primitives |
| [Pages](frontend/PAGES.md) | All 20 routes — auth, components, data fetching, compliance pages |
| [Design System](frontend/DESIGN-SYSTEM.md) | Colors, typography (Fraunces/DM Sans/Geist Mono), spacing, patterns |
| [State Management](frontend/STATE-MANAGEMENT.md) | useAuth hook, feature flags, data fetching patterns |
| [Landing Pages](frontend/LANDING-PAGES.md) | Marketing site — 9 sections, 12 sub-pages, waitlist API |

## Mobile

| Document | Description |
|----------|-------------|
| [Mobile App](mobile/MOBILE-APP.md) | Expo Router architecture, 8 screens, API client, theme |

## Infrastructure

| Document | Description |
|----------|-------------|
| [Deployment](infrastructure/DEPLOYMENT.md) | Docker, Fly.io, 3 deployment configs (MVP/Production/Staging) |
| [CI/CD](infrastructure/CI-CD.md) | GitHub Actions pipeline — lint, test, build, e2e, docker (5 jobs) |
| [Monitoring](infrastructure/MONITORING.md) | Health checks, container monitoring, gaps identified |
| [Environment](infrastructure/ENVIRONMENT.md) | Tech stack, npm scripts, Next.js config, env modes |

## Security

| Document | Description |
|----------|-------------|
| [Security Architecture](security/SECURITY-ARCHITECTURE.md) | JWT, cookies, bcrypt, CSRF, rate limiting, input validation |
| [Compliance](security/COMPLIANCE.md) | PSD2, AML, GDPR, DORA readiness — 8/100 overall, remediation plan |

## Testing

| Document | Description |
|----------|-------------|
| [Testing Guide](testing/TESTING-GUIDE.md) | Vitest + Playwright, running tests, mocking, patterns |
| [Test Inventory](testing/TEST-INVENTORY.md) | All 14 test files — unit, integration, e2e, regression, performance |

## Quality Assurance

| Document | Description |
|----------|-------------|
| [Validation Report](VALIDATION-REPORT.md) | Cross-reference audit of all docs against source code |