docs(positioning): README, distribution surfaces and first-run screen carry the ADR-0011 line (abilityai/trinity-enterprise#797)

[vybe]

Fixes abilityai/trinity-enterprise#797 — the public-surfaces half of the ADR-0011 positioning epic (abilityai/trinity-enterprise#796). Independent branch off dev — the four #796 children touch disjoint files and merge in any order (operator, 2026-10-05). Draft until the chain is in.

What

Fourteen files, one-line copy changes, in three commits:

• README.md (f535b8a7): hero alt text, the H2, the lede (headline bold + the paired promise in the same paragraph), "The solution" line, and the footer company line ("the lab for AI-native companies"); plus T3 — the bare "SSO, " removed from the enterprise-modules sentence.
• Distribution + CLI surfaces (67e45ccd, 12 paths, description strings only): install.sh banner, packer/aws/listing.md, packer/digitalocean/listing.md, packer/aws/trinity.pkr.hcl (ami_description), packer/aws/trinity.cfn.yaml (Description), the DigitalOcean MOTD, scripts/deploy/vultr-vendor-data.sh, src/cli/README.md, src/cli/trinity_cli/main.py docstring, src/cli/pyproject.toml description, packaging/homebrew/trinity-cli.rb desc, docs/CLI.md.
• First-run screen (0075cd53): src/frontend/src/views/SetupPassword.vue lede now carries the one-line form, same element and attributes, literal em dash as the base file writes it.

The issue's acceptance grep returns nothing on the branch (18 hits at the base, 0 at the tip).

Rulings carried (orchestrator, on the operator's behalf — plan file)

• T1 hero image docs/assets/trinity-hero.webp: animated image whose text is the wordmark + "Run agents like infrastructure" (an older slogan, not the retired tagline) — not regenerated here; see Before merge.
• T2 listing body text ("Deploy, orchestrate and govern…") stays — mechanism, not what Trinity is.
• T3 README.md enterprise-modules sentence: narrowest fix, "SSO, " removed (the epic's claims rule names a bare "SSO"); no enterprise detail added.
• T4 README.md "Trinity is where they run." stays. T5 the orchestration keyword in src/cli/pyproject.toml stays (mechanism keyword).
• T6 no guard test against the old phrases — the acceptance grep is the evidence (trinity#2688 argues against source-text pins).
• T7 README lede = headline bold + pairing line. T8 the first-run screen omits the pairing line (short surface, one-line form).

Review + security

/review (claude-fable-5-1, report-only): MERGEABLE — 0 critical, 0 informational. Exactly 14 files, +19/−19; every removed line equals the plan's Before text and every added line the plan's After text byte-for-byte; no banned phrase, no headline "independent", no bare "SSO", no "sovereign"/"model-agnostic" on a headline or lede line; carriers parse (bash -n on the three shell files, tomllib, ast.parse, yaml.safe_load on the CFN template, the HCL and Homebrew strings each one clean double-quoted string, the banner tagline row exactly 60 wide); .claude, src/backend/enterprise and the root CLAUDE.md untouched; git merge-tree against live dev (493d2a6) clean. Two pre-existing notes, not introduced here: README's enterprise-modules line still names "SIEM export" (outside the enterprise-docs guard's scope; the PR narrows the line) and the install banner's ASCII-art rows are one column short of the frame. /cso --diff: 0 findings (no secrets, no new URLs or emails, no invisible Unicode, no injection strings, no v-html).

Tests

• No unit or frontend spec pins any changed string. setupPasswordClaim.spec.js is the only spec touching the view; read in full, it never asserts on the lede. ruby -c not run (ruby absent on the review host) — the formula's desc quoting was judged by inspection.
• Not run here: the frontend unit job, frontend-e2e (required — src/frontend changed) and the full unit island: CI on this PR.

Before merge

• Hero image (T1, design item): docs/assets/trinity-hero.webp still shows "Run agents like infrastructure" — regenerate on the new line or accept as is (operator call; DoD bullet 3).
• Operator acts (DoD bullets 2 and 4): update the repo About description, topics and social preview; re-submit the published DigitalOcean and AWS marketplace listings from the new packer/*/listing.md text after this merges.
• No open PR touches any of the 14 files (21 open PRs scanned 2026-10-05 23:10 UTC); merge-tree against dev @ 493d2a6 clean.

Handoffs

• abilityai/trinity-enterprise#796 — epic; this PR closes the README / repo-description rows it delegated to fix(executor): salvage telemetry + auto-retry reader-race empty results (#678) #797.
• abilityai/trinity-enterprise#801 (platform_prompt_service.py) and test(subscription): pin auto-switch chain skips .credentials.enc import (#606) #800 (engineer context) carry the remaining old-phrase hits the review found outside this issue's table.

🤖 Generated with Claude Code

[trinity-ability]

merge-train: batch validated on train/20261006-1038 (#3270)