docs: say what each zone covers, not just how it is wired

docs/CODE-OWNERSHIP.md

@@ -17,22 +17,22 @@ or a runtime concept. They exist only for review scope.
 
 Fourteen buckets. Every tracked file lands in exactly one.
 
-| Zone | `pr-zone-check` pattern | CODEOWNERS line | Owner |
-|---|---|---|---|
-| `discord-bot` | `discord-bot/*` | `/discord-bot/` | @qiuethan |
-| `packages/auth` | `packages/auth/*` | `/packages/auth/` | @qiuethan |
-| `packages/other` | `packages/*` | `/packages/` | @qiuethan |
-| `services/connectors` | `services/connectors/*` | `/services/connectors/` | @qiuethan |
-| `services/documentation-system` | `services/documentation-system/*` | `/services/documentation-system/` | @qiuethan |
-| `services/llm` | `services/llm/*` | `/services/llm/` | @qiuethan |
-| `services/meeting` | `services/meeting/*` | `/services/meeting/` | @qiuethan |
-| `services/team-tracking` | `services/team-tracking/*` | `/services/team-tracking/` | @qiuethan |
-| `services/verification` | `services/verification/*` | `/services/verification/` | @qiuethan |
-| `services/other` | `services/*` | `/services/` | @qiuethan |
-| `docs` | `docs/*` | `/docs/` | @qiuethan |
-| `scripts` | `scripts/*` | `/scripts/` | @qiuethan |
-| `.github` | `.github/*` | `/.github/` | @qiuethan |
-| `root` | everything else | *(the `*` fallback)* | @qiuethan |
+| Zone | What it covers | Owner | `pr-zone-check` pattern | CODEOWNERS line |
+|---|---|---|---|---|
+| `discord-bot` | Discord frontend for the platform — slash commands over the team-tracking API. Holds no database and no business logic. [README](../discord-bot/README.md) | @qiuethan | `discord-bot/*` | `/discord-bot/` |
+| `packages/auth` | `platform-auth`, the shared API-key auth library — keys, scopes, audit middleware — that every service wires in via `build_auth(...)`. [README](../packages/auth/README.md) | @qiuethan | `packages/auth/*` | `/packages/auth/` |
+| `packages/other` | Any package with no zone of its own yet. Transitional — see below. | @qiuethan | `packages/*` | `/packages/` |
+| `services/connectors` | Stateless `POST /fetch` — returns document text from external sources (Google Drive/Docs) so consumers never hold source credentials. [README](../services/connectors/README.md) | @qiuethan | `services/connectors/*` | `/services/connectors/` |
+| `services/documentation-system` | Catalog API for the org's links — docs, sheets, repos, videos — with owners, tags, and content snapshots. [README](../services/documentation-system/README.md) | @qiuethan | `services/documentation-system/*` | `/services/documentation-system/` |
+| `services/llm` | Stateless `POST /chat` fronting Claude on Bedrock. The single choke point for credentials, model catalog, and provider quirks. [README](../services/llm/README.md) | @qiuethan | `services/llm/*` | `/services/llm/` |
+| `services/meeting` | Stateful HTTP + WebSocket service: live Discord voice audio to Amazon Transcribe, then a rolling transcript, minutes, and a PDF. [README](../services/meeting/README.md) | @qiuethan | `services/meeting/*` | `/services/meeting/` |
+| `services/team-tracking` | Source of truth for the directory — people, teams, roles, memberships, external identity mapping. [README](../services/team-tracking/README.md) | @qiuethan | `services/team-tracking/*` | `/services/team-tracking/` |
+| `services/verification` | Proves someone controls an email address for a given subject, via short-lived one-time codes. [README](../services/verification/README.md) | @qiuethan | `services/verification/*` | `/services/verification/` |
+| `services/other` | Any service with no zone of its own yet. Transitional — see below. | @qiuethan | `services/*` | `/services/` |
+| `docs` | The top-level `docs/` only: cross-cutting docs that belong to no one service. A service's own `docs/` is part of that service's zone. | @qiuethan | `docs/*` | `/docs/` |
+| `scripts` | Repo-level tooling run by hand or by CI — [`check-labels.mjs`](../scripts/check-labels.mjs), the provisioning and registration shell scripts. | @qiuethan | `scripts/*` | `/scripts/` |
+| `.github` | CI and repo automation: the [workflows](../.github/workflows), [`CODEOWNERS`](../.github/CODEOWNERS), [`labeler.yml`](../.github/labeler.yml), and the issue and PR templates. | @qiuethan | `.github/*` | `/.github/` |
+| `root` | Every top-level file: `README.md`, [`AGENTS.md`](../AGENTS.md), `Makefile`, `pyproject.toml`, `uv.lock`, `.claude/`, the dotfiles. | @qiuethan | everything else | *(the `*` fallback)* |
 
 Every owner is a `@qiuethan` placeholder for now. Per-zone assignment happens as
 people are hired — see [`CODEOWNERS`](../.github/CODEOWNERS) for how to add one