Getting Started/
 ├── Introduction
 ├── Quickstart (DIY)
 └── Jumpstart Customers

 Build Your Foundation/
 ├── Setup your project/
 │   ├── Create Repository
 │   ├── Toolbox
 │   ├── Design Decisions/
 │   └── Tutorials/
+│       └── Migrate from Account Map              # NEW - migration guide
 │
 ├── Manage Accounts/
 │   ├── Accounts (index)
 │   ├── Prepare AWS Organization
 │   ├── Initialize Terraform Backend
 │   ├── Deploy Accounts
+│   ├── Setup CloudTrail                         # NEW
-│   ├── Account Baseline                         # REMOVED
 │   ├── FAQ
 │   ├── Design Decisions/
 │   └── Tutorials/
-│       ├── Cold Start                           # REMOVED
-│       ├── Deprecated Cold Start Components     # REMOVED
-│       ├── Manual Configuration                 # REMOVED
+│       ├── Create Account Root Users            # NEW
+│       ├── Legacy Account Map                   # NEW - reference for migration
 │       ├── How to Add a New OU
 │       ├── How to Add or Mirror a Region
 │       ├── How to Adopt/Import Legacy Accounts
 │       ├── How to Create and Setup AWS Accounts
 │       ├── How to Create SuperAdmin User
 │       ├── How to Delete AWS Accounts
 │       ├── How to Manage Account Settings
 │       ├── How to Register Pristine AWS Root Account
 │       ├── How to Set Up AWS Email Notifications
 │       └── Terraform S3 State
 │
 ├── Identity and Authentication/
 │   ├── Identity (index)
 │   ├── Setup Identity Center (AWS SSO)
+│   ├── Centralize Root Access                   # NEW
 │   ├── Deploy IAM Roles
+│   ├── Configure Atmos Auth                     # NEW - replaces Leapp
 │   ├── Login to AWS
-│   ├── Centralized Terraform Access             # REMOVED
-│   ├── FAQ                                      # REMOVED
 │   ├── Design Decisions/
-│   ├── Docs/                                    # REMOVED folder
-│   │   ├── AWS Access Control Architecture
-│   │   ├── AWS Access Control Evolution
-│   │   ├── AWS Access Control
-│   │   ├── AWS Restricting Admin Access
-│   │   └── Dynamic Terraform Roles
-│   ├── Optional/                                # REMOVED folder
-│   │   └── AWS SAML
 │   └── Tutorials/
+│       ├── Access Control Evolution             # NEW (content from docs/)
+│       ├── AWS SAML                             # NEW (moved from optional/)
 │       ├── How to Setup SAML Login from Office 365
-│       ├── Expanding IAM Roles                  # REMOVED
-│       ├── How to Create a Delegated Role       # REMOVED
-│       ├── How to Easily Switch AWS Account Roles # REMOVED
-│       └── Leapp/                               # REMOVED folder
-│           ├── Leapp
-│           └── How to Setup Windows
 │
 └── Network and DNS/
     ├── Network (index)
     ├── Deploy VPCs
     ├── Connect Network (Transit Gateway)        # REWRITTEN
     ├── Access Network (VPN)
     ├── DNS Setup
     ├── FAQ
     └── Design Decisions/

 Set Up Your Platform/
 ├── Configure GitHub Actions/
 │   ├── GitHub Actions (index)
 │   ├── Design Decisions/
 │   ├── GitHub OIDC with AWS
 │   ├── Setup RunsOn                            # UPDATED - now primary option
+│   └── Tutorials/                              # NEW folder
+│       ├── Philips Labs Runners                # MOVED + deprecated notice
+│       └── EKS ARC Runners                     # MOVED + deprecated notice
-│   ├── Philips Labs GitHub Runners             # MOVED to tutorials/
-│   └── EKS GitHub Actions Controller           # MOVED to tutorials/
 │
 ├── Orchestrate Containers/
 │   ├── Use ECS/
 │   └── Use EKS/
 │
 └── Automate Terraform (Atmos Pro)/
     ├── Atmos Pro (index)
     ├── Setup Atmos Pro                         # REWRITTEN
+    ├── Deploy with Terraform                   # NEW (was in tutorials/)
+    ├── Drift Detection                         # NEW
     └── Tutorials/
-        ├── Deploy with Terraform               # MOVED up to main level
+        └── Migrate from GitHub Actions GitOps  # NEW

 Deploy Your Apps/
 ├── Provision Databases/
 └── Implement CI/CD (Software Delivery)/
     └── EKS with ArgoCD/

 Monitor Everything/
 ├── Implement Telemetry/
 │   ├── Datadog/
 │   └── Grafana/
 └── Security and Compliance/

 GitOps/                                         # ALL PAGES DEPRECATED
 ├── GitOps (index)                              # + deprecation notice
 ├── Setup                                       # + deprecation notice
 ├── Example Workflows                           # + deprecation notice
 └── FAQ                                         # + deprecation notice

 quickstart/
 ├── app/
 │   ├── app-on-ecs.yaml
 │   └── app-on-eks-with-argocd.yaml
 ├── foundation/
 │   ├── accounts.yaml                           # UPDATED (merged baseline)
+│   ├── atmos-pro.yaml                          # NEW (renamed from gitops.yaml)
-│   ├── baseline.yaml                           # REMOVED (merged into accounts)
-│   ├── github.yaml                             # REMOVED (OIDC → identity)
-│   ├── gitops.yaml                             # RENAMED → atmos-pro.yaml
 │   ├── identity.yaml                           # UPDATED (added OIDC deployment)
+│   └── runs-on.yaml                            # NEW (runner deployment only)
 ├── monitor/
-│   └── compliance.yaml                         # RENAMED
+│   └── security-and-compliance.yaml            # RENAMED from compliance.yaml
+├── network/                                    # NEW folder
+│   └── network.yaml                            # MOVED from foundation/
-├── foundation/network.yaml                     # MOVED → network/network.yaml
 └── platform/
-    └── argocd.yaml                             # RENAMED
+    └── software-delivery.yaml                  # RENAMED from argocd.yaml