diff --git a/.dockerignore b/.dockerignore
index 979b217f..f5bb5b20 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -48,3 +48,7 @@ debian
website
README.md
AGENTS.md
+# Branding for README.md only. docs/ otherwise feeds the image build context
+# and its hash, so leaving these in would rebuild the image for every user
+# whenever the logo changes.
+docs/assets
diff --git a/README.md b/README.md
index 9657d897..dcc4ff85 100644
--- a/README.md
+++ b/README.md
@@ -1,8 +1,9 @@
-
-
-
-
-
Eclipse Enclave
+
+
+
+
+
+
A Docker-based sandbox for running agentic coding tools — Claude, Codex, OpenCode, and others — in an isolated container while keeping your project files on the host. Network access is restricted to allowlisted domains by default, auth and history persist across sessions, and YOLO mode is on so agents can act without confirmation prompts.
diff --git a/docs/ARCHITECTURE.md b/docs/ARCHITECTURE.md
index 5a772220..9d796fdd 100644
--- a/docs/ARCHITECTURE.md
+++ b/docs/ARCHITECTURE.md
@@ -159,7 +159,7 @@ The restricted network request flow has a separate
- [`runtime-assets/net.sh`](../runtime-assets/net.sh) holds shared entrypoint network helpers (local resolver and loopback proxy setup).
- [`runtime-assets/microvm/alpine/`](../runtime-assets/microvm/alpine/) holds the experimental QEMU Alpine bundle init and builder.
- [`extensions/tools//templates/`](../extensions/tools/) holds per-tool settings templates baked into the image during build.
-- [`docs/`](../docs/) is included in the runtime build context so the image can install agent-facing help under `/usr/share/doc/enclave/`.
+- [`docs/`](../docs/) is included in the runtime build context so the image can install agent-facing help under `/usr/share/doc/enclave/`. [`docs/assets/`](../docs/assets/) is excluded in [`.dockerignore`](../.dockerignore); it holds only `README.md` branding, and keeping it out spares users an image rebuild whenever the logo changes.
## Key Concepts
diff --git a/docs/assets/appicon.png b/docs/assets/appicon.png
deleted file mode 100644
index 198366ac..00000000
Binary files a/docs/assets/appicon.png and /dev/null differ
diff --git a/docs/assets/enclave-logo-horizontal-darkbg.png b/docs/assets/enclave-logo-horizontal-darkbg.png
new file mode 100644
index 00000000..761da737
Binary files /dev/null and b/docs/assets/enclave-logo-horizontal-darkbg.png differ
diff --git a/docs/assets/enclave-logo-horizontal-lightbg.png b/docs/assets/enclave-logo-horizontal-lightbg.png
new file mode 100644
index 00000000..2ce60a96
Binary files /dev/null and b/docs/assets/enclave-logo-horizontal-lightbg.png differ
diff --git a/website/assets/appicon.png b/website/assets/appicon.png
deleted file mode 100644
index 198366ac..00000000
Binary files a/website/assets/appicon.png and /dev/null differ
diff --git a/website/assets/enclave-logo-horizontal-lightbg.svg b/website/assets/enclave-logo-horizontal-lightbg.svg
new file mode 100644
index 00000000..04bd3302
--- /dev/null
+++ b/website/assets/enclave-logo-horizontal-lightbg.svg
@@ -0,0 +1,108 @@
+
+
\ No newline at end of file
diff --git a/website/assets/enclave-mark-lightbg.svg b/website/assets/enclave-mark-lightbg.svg
new file mode 100644
index 00000000..f6fb6fbb
--- /dev/null
+++ b/website/assets/enclave-mark-lightbg.svg
@@ -0,0 +1,90 @@
+
+
diff --git a/website/assets/favicon.png b/website/assets/favicon.png
new file mode 100644
index 00000000..3d18d496
Binary files /dev/null and b/website/assets/favicon.png differ
diff --git a/website/assets/social-card.png b/website/assets/social-card.png
new file mode 100644
index 00000000..20b4ac7e
Binary files /dev/null and b/website/assets/social-card.png differ
diff --git a/website/css/styles.css b/website/css/styles.css
index 9db7c8df..4c70d5fa 100644
--- a/website/css/styles.css
+++ b/website/css/styles.css
@@ -115,7 +115,7 @@ h2 + .section-lead { margin-top: 0; }
gap: 20px;
}
.nav-brand { display: flex; align-items: center; gap: 10px; font-weight: 800; color: var(--heading); font-size: 1.05rem; }
-.nav-brand img { width: 28px; height: 28px; }
+.nav-brand img { height: 30px; width: auto; }
.nav-links { margin-left: auto; display: flex; align-items: center; gap: 26px; }
.nav-links a { color: var(--muted); font-weight: 600; font-size: 0.92rem; }
.nav-links a:hover { color: var(--heading); }
@@ -392,6 +392,7 @@ footer.site-footer {
color: var(--muted);
}
footer.site-footer a { font-weight: 600; }
+.footer-logo { display: block; width: 168px; height: auto; margin: 0 auto 20px; }
/* ------- Responsive ------- */
@media (max-width: 720px) {
diff --git a/website/docs/README.md b/website/docs/README.md
index 574596f4..8f6fbe4f 100644
--- a/website/docs/README.md
+++ b/website/docs/README.md
@@ -42,12 +42,38 @@ relative `../` is handled client-side, matches no docs route, and renders the
docs 404 page instead. `onBrokenLinks` is set to `throw` to catch this at build
time.
+The footer logo is the one exception: `themeConfig.footer.logo` rejects
+`autoAddBaseUrl`, so it cannot link home without being rewritten back under the
+docs base path. It stays unlinked; the footer's "Home" entry covers that.
+
The custom domain lives in a `CNAME` file at the root of the published branch.
The publish workflow re-creates it on every deploy (`cname:` input), because the
deploy action replaces the published tree.
Both website workflows push with the organization secret `DEPLOY_TOKEN`.
+## Brand assets
+
+The Eclipse Foundation logo comes in a horizontal lockup (mark plus wordmark)
+and an icon-only mark, each with a variant for light and for dark backgrounds.
+The `-darkbg` variants are the same artwork with the cube faces, inner disc, and
+wordmark in white; do not mix them up, or the wordmark disappears.
+
+| File | Used by |
+| --- | --- |
+| `static/img/enclave-mark-{lightbg,darkbg}.svg` | docs navbar (`logo.src` / `logo.srcDark`) |
+| `static/img/enclave-logo-horizontal-darkbg.svg` | docs footer, which is dark in both color modes |
+| `static/img/favicon.png` | docs favicon |
+| `static/img/social-card.png` | Open Graph / Twitter card |
+| `../assets/enclave-mark-lightbg.svg` | marketing site navbar |
+| `../assets/enclave-logo-horizontal-lightbg.svg` | marketing site footer |
+| `../assets/{favicon,social-card}.png` | marketing site favicon and social card |
+| `../../docs/assets/enclave-logo-horizontal-{lightbg,darkbg}.png` | repository `README.md` |
+
+The favicon and social card are rendered from the SVGs. The README uses PNG
+because these SVGs carry their fills in an embedded `
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/website/docs/static/img/enclave-mark-darkbg.svg b/website/docs/static/img/enclave-mark-darkbg.svg
new file mode 100644
index 00000000..72be6a40
--- /dev/null
+++ b/website/docs/static/img/enclave-mark-darkbg.svg
@@ -0,0 +1,90 @@
+
+
diff --git a/website/docs/static/img/enclave-mark-lightbg.svg b/website/docs/static/img/enclave-mark-lightbg.svg
new file mode 100644
index 00000000..f6fb6fbb
--- /dev/null
+++ b/website/docs/static/img/enclave-mark-lightbg.svg
@@ -0,0 +1,90 @@
+
+
diff --git a/website/docs/static/img/favicon.png b/website/docs/static/img/favicon.png
index 682468f1..3d18d496 100644
Binary files a/website/docs/static/img/favicon.png and b/website/docs/static/img/favicon.png differ
diff --git a/website/docs/static/img/logo.png b/website/docs/static/img/logo.png
deleted file mode 100644
index 198366ac..00000000
Binary files a/website/docs/static/img/logo.png and /dev/null differ
diff --git a/website/docs/static/img/social-card.png b/website/docs/static/img/social-card.png
new file mode 100644
index 00000000..20b4ac7e
Binary files /dev/null and b/website/docs/static/img/social-card.png differ
diff --git a/website/index.html b/website/index.html
index 73d67684..0ceec295 100644
--- a/website/index.html
+++ b/website/index.html
@@ -14,7 +14,7 @@
Eclipse Enclave: secure sandboxing for AI coding agents
-
+
@@ -22,8 +22,8 @@
-
-
+
+
@@ -36,7 +36,7 @@
-
+