docs: add demo video, dev tunnel policy warnings, fix doc inconsistencies

- Add Mata v. Avianca demo video to README (inline MP4, 3MB)
- Add corporate/bar policy warning to dev tunnel section (README + INSTALL)
- Fix INSTALL.md: correct clone URLs (your-org → john-walkoe), reorder
  Claude config section to show Docker as recommended over STDIO
- Fix PROMPTS.md Template 11: use canonical section names (workflow,
  overview instead of fallback_chain/tools)
- Fix USAGE_EXAMPLES.md Getting Help: citation_workflow → workflow
- Exclude documentation_photos/ from large-file pre-commit check

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: john-walkoe

.pre-commit-config.yaml

@@ -28,6 +28,7 @@ repos:
       - id: check-yaml
       - id: check-added-large-files
         args: ['--maxkb=1000']
+        exclude: ^documentation_photos/
       - id: check-json
       - id: check-merge-conflict
       - id: detect-private-key

INSTALL.md

@@ -36,7 +36,7 @@ Step-by-step setup for the CourtListener Citation Validation MCP on Windows and
 
 1. Clone or download the repository:
    ```powershell
-   git clone https://github.com/your-org/courtlistener_citations_mcp.git
+   git clone https://github.com/john-walkoe/courtlistener_citations_mcp.git
    cd courtlistener_citations_mcp
    ```
 
@@ -64,7 +64,7 @@ Step-by-step setup for the CourtListener Citation Validation MCP on Windows and
 
 1. Clone or download the repository:
    ```bash
-   git clone https://github.com/your-org/courtlistener_citations_mcp.git
+   git clone https://github.com/john-walkoe/courtlistener_citations_mcp.git
    cd courtlistener_citations_mcp
    ```
 
@@ -120,9 +120,26 @@ The token is **never stored in the MCP config file** — it is loaded at runtime
 
 ## Claude Desktop / Claude Code Configuration
 
-### STDIO Mode (Recommended)
+### Docker / HTTP Mode (Recommended for Full Feature Set)
 
-STDIO is the default and is used by Claude Desktop and Claude Code directly.
+Docker is the recommended installation method. It enables the **interactive MCP App panel** — color-coded citation cards with clickable CourtListener links rendered inline in Claude Desktop.
+
+See [Docker / HTTP Mode](#docker--http-mode) below, then add this to your Claude config:
+
+```json
+{
+  "mcpServers": {
+    "courtlistener_citations": {
+      "command": "npx",
+      "args": ["mcp-remote", "http://localhost:8000/mcp"]
+    }
+  }
+}
+```
+
+### STDIO Mode (Text Results Only)
+
+> **Note:** STDIO mode works for all citation validation tools. However, the **interactive MCP App panel does not render in Claude Desktop via STDIO** — you will get text results only. DPAPI/Windows Credential Manager secure token storage is STDIO-only (Windows). Use Docker mode above for the full visual panel experience.
 
 Add to your Claude config (`~/.claude.json` for Claude Code, or `~/.config/Claude/claude_desktop_config.json` for Claude Desktop):
 
@@ -344,6 +361,8 @@ http://localhost:8000/mcp
 
 ### Dev Tunnel (Windows — for remote access)
 
+> ⚠️ **Corporate & Regulatory Policy Notice:** Dev tunnels create a publicly accessible endpoint for your local server. Before using this feature, consult your organization's IT security policy and bar association ethics rules regarding client data confidentiality. Many law firms prohibit this type of network bypass on managed devices. **Do not use on corporate/managed hardware without IT approval.** For production use, deploy behind a properly secured reverse proxy instead.
+
 To expose the local HTTP server via a dev tunnel:
 
 ```powershell

PROMPTS.md

@@ -474,10 +474,11 @@ Status codes:
 
 | Section | Content |
 |---------|---------|
-| `overview` | What this MCP does, when to use it |
-| `citation_workflow` | The 3-tool fallback chain explained |
-| `tools` | Reference for all 7 tools |
-| `fallback_chain` | Detailed fallback logic with search optimization |
+| `overview` | What this MCP does, when to use it, tool reference |
+| `workflow` | Full discovery + 3-tool fallback chain explained |
+| `response_format` | How to format results with ✅/⚠️/❌ symbols |
+| `hallucination_patterns` | Common AI hallucination detection patterns |
+| `edge_cases` | SCOTUS parallel citations, state courts, unpublished opinions |
 | `risk_assessment` | How to interpret ✅/⚠️/❌ and risk levels |
 | `limitations` | CourtListener coverage gaps and false negatives |
 
@@ -486,6 +487,9 @@ Status codes:
 Use courtlistener_get_guidance with section="overview"
 ```
 ```
+Use courtlistener_get_guidance with section="workflow"
+```
+```
 Use courtlistener_get_guidance with section="risk_assessment"
 ```
 ```

README.md

@@ -7,6 +7,12 @@ A Model Context Protocol (MCP) server for validating legal citations against the
 [![API](https://img.shields.io/badge/API-CourtListener%20REST%20v4-green.svg)]()
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 
+## Demo
+
+Citation validation of *Mata v. Avianca*.  The MCP detects which citations are real, which are fabricated, and which resolve to the wrong case entirely.
+
+![CourtListener Citation Validation MCP Demo](documentation_photos/courtlistener_citations_mcp.mp4)
+
 ## Quick Start
 
 ### Docker (Recommended)
@@ -274,6 +280,17 @@ COURTLISTENER_API_TOKEN=your_40_char_hex_token_here
 
 ### Dev Tunnel for CoPilot Studio / Claude.ai
 
+> ⚠️ **Corporate & Regulatory Policy Notice**
+>
+> Dev tunnels create a **publicly accessible endpoint** for your local server. Before using this feature, you **must**:
+>
+> - **Consult your organization's IT security policy.** Many law firms, corporations, and government entities prohibit or restrict the use of development tunnels, reverse proxies, and other tools that bypass network perimeter controls on managed devices or corporate networks.
+> - **Check your bar association's ethics rules.** Attorney obligations regarding client data confidentiality (Model Rules 1.6, 1.15) may impose additional constraints on transmitting client documents through third-party relay infrastructure.
+> - **Do not use this feature on managed/corporate hardware** without explicit written approval from your IT/security team.
+> - **Do not use this feature for production deployments.** Dev tunnels are intended for development and testing only. For production external access, use a properly secured reverse proxy (e.g., nginx with TLS) or a cloud-hosted deployment.
+>
+> If in doubt, ask your IT department first.
+
 For external access (CoPilot Studio, Claude.ai), use the dev tunnel launcher script. It starts the HTTP server locally and creates a [Microsoft Dev Tunnel](https://learn.microsoft.com/en-us/azure/developer/dev-tunnels/) to expose it publicly.
 
 **Prerequisites:** `devtunnel.exe` ([download](https://aka.ms/devtunnels)) and `devtunnel user login`

USAGE_EXAMPLES.md

@@ -428,7 +428,7 @@ Expected: first verified ✅, second not found ❌.
 
 ```
 Use courtlistener_get_guidance with section="overview" to learn what this MCP does.
-Use courtlistener_get_guidance with section="citation_workflow" to understand the fallback chain.
+Use courtlistener_get_guidance with section="workflow" to understand the fallback chain.
 Use courtlistener_get_guidance with section="risk_assessment" to understand risk levels.
 Use courtlistener_get_guidance with section="limitations" to understand coverage gaps.
 ```