rewrite org card prose: drop AI-tells, replace 'security veterans'

README.md

@@ -9,57 +9,59 @@ pinned: false
 
 # Deep Fathom
 
-**Making continuous CMMC readiness the norm for the Defense Industrial
-Base.**
+Our mission is to make continuous CMMC readiness the norm for the
+Defense Industrial Base.
 
-We're builders, security veterans, and engineers shipping an
-AI-native compliance system for CMMC — one that guides priorities,
-orchestrates work across teams and tools, automates the routine steps,
-verifies in flow, and keeps documentation synchronized as the work
-moves.
+Deep Fathom builds an AI-native compliance platform for CMMC. The
+platform takes on the routine work, tracks evidence as teams generate
+it, and keeps documentation aligned with the actual state of the
+controls. The people behind it are engineers and compliance
+practitioners who got tired of treating audits as ceremony.
 
-This is where we publish the open building blocks of that system.
+This Hugging Face org is the open side of that work. We publish the
+ML pieces we can release: model adapters today, datasets later when
+licensing allows.
 
-## Active project
+## What's here
 
-[**basalt**](https://huggingface.co/deepfathom/basalt) — a CMMC /
-NIST SP 800-171 / DFARS practitioner Q&A LoRA adapter on top of
-`ibm-granite/granite-4.1-8b`. Currently private during M-Train v1
-validation; release is contingent on completed eval and license review
-of the base-model and corpus terms.
+[basalt](https://huggingface.co/deepfathom/basalt) is the only public
+artifact right now. It is a LoRA adapter for CMMC, NIST SP 800-171,
+and DFARS practitioner Q&A, layered on `ibm-granite/granite-4.1-8b`.
+The repo is private through M-Train v1 validation. Public release
+depends on eval results and a license review of the base model and
+corpus terms.
 
 ## How we build the models
 
-- **Curation over scale.** ~13K judge-validated practitioner pairs
-  beat 100K of unfiltered scrapes for narrow regulatory domains.
-- **Provenance everywhere.** Every published artifact ties back to a
-  reproducible training run — data version, seed, hyperparameters,
-  judge configuration.
-- **Adapters, not merges.** Domain deltas ship as LoRA adapters,
-  composable at runtime with the upstream base via PEFT / vLLM. Users
-  get the latest base model plus our specialty layer, swappable
-  independently.
+We choose curation over scale. Roughly 13,000 judge-validated
+practitioner pairs do better work than 100,000 unfiltered scrapes
+when the domain is this narrow.
+
+Every artifact links back to a reproducible training run. We record
+the data version, seed, hyperparameters, and judge configuration so a
+later release can be checked against the artifact it claims to
+supersede.
+
+We publish LoRA adapters rather than merged weights. PEFT and vLLM
+load the base and the adapter together at runtime. The result is the
+latest upstream base, our specialty layer composed on top of it, and
+the option to swap each layer independently.
 
 ## Principles
 
-- **More rigor. Radically less effort.** Higher compliance standards
-  delivered with less friction.
-- **Frontier AI, applied.** Where useful, where the math is real,
-  where the trade-offs are honest.
-- **Security and compliance, intertwined by design.** Proof and
-  protection, not bolted on after the fact.
-- **One truth, shared authority.** Same view across the team, the
-  partner, and the assessor.
+1. More rigor. Radically less effort.
+2. Frontier AI, applied where it carries weight.
+3. Security and compliance treated as one workflow.
+4. One truth, shared across the team, the partner, and the assessor.
 
 ## Who we work with
 
-- **Defense contractors and DIB suppliers** — from primes down to the
-  small businesses CMMC was always going to test hardest.
-- **MSPs and MSSPs** delivering compliance services without building
-  the in-house regulatory expertise from scratch.
-- **C3PAOs and assessors** who need shared evidence, not screenshots.
+Defense contractors and DIB suppliers, including the small businesses
+that CMMC was always going to test hardest. MSPs and MSSPs that
+deliver compliance services for clients. C3PAOs and assessors who
+want shared evidence instead of screenshots.
 
-## Reach us
+## Reach
 
-[deepfathom.ai](https://www.deepfathom.ai) · model repo discussions
-for technical questions.
+[deepfathom.ai](https://www.deepfathom.ai). Use model repo
+discussions for technical questions.