diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d8f93a6..722d27d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -68,20 +68,20 @@ jobs:
           npm run audit:ci -- \
             --path ./examples/ci-safe-mcp.json \
             --output ./.ci-mcp-inventory.json \
-            --sarif ./.ci-secure-mpc.sarif
+            --sarif ./.ci-mcp-trustmap.sarif
 
       - name: Generate Kubernetes admission bundle
         run: |
           npm run generate:admission -- \
             --policy-file ./examples/oci-policies.json \
-            --namespace secure-mpc-ci \
+            --namespace mcp-trustmap-ci \
             --output ./.ci-kubernetes-admission
 
       - name: Validate Kubernetes admission bundle
         run: |
           npm run validate:admission -- \
             --policy-file ./examples/oci-policies.json \
-            --namespace secure-mpc-ci \
+            --namespace mcp-trustmap-ci \
             --bundle ./.ci-kubernetes-admission
 
       - name: Lint
diff --git a/README.md b/README.md
index 5bd020b..59b42a2 100644
--- a/README.md
+++ b/README.md
@@ -1,15 +1,31 @@
-# Secure MPC
+# MCP TrustMap
 
 [![CI](https://github.com/mawoole/SecureMPC/actions/workflows/ci.yml/badge.svg)](https://github.com/mawoole/SecureMPC/actions/workflows/ci.yml)
 
-![Aperçu Secure MPC](public/og.png)
+![Aperçu MCP TrustMap](public/og.png)
 
-Secure MPC est une application web d’audit de configurations MCP
+MCP TrustMap est une application web d’audit de configurations MCP
 ([Model Context Protocol](https://modelcontextprotocol.io/)). Elle transforme un
 inventaire de serveurs difficile à relire en une posture de sécurité claire :
 score global, risques prioritaires, explication de l’impact et correctifs
 directement applicables.
 
+## Modules produit
+
+- **TrustMap Discover** construit la cartographie des serveurs, sources,
+  transports et composants découverts par le collecteur local ou par import.
+- **TrustMap Audit** applique le référentiel de sécurité, priorise les écarts,
+  fournit les correctifs, gère les exceptions et conserve l’historique agrégé.
+- **TrustMap CI** simule une politique sur l’inventaire courant et génère la
+  commande ainsi que le workflow GitHub Actions correspondant, avec SARIF,
+  CycloneDX, OSV et vérification de provenance configurables.
+- **TrustMap Enterprise** mesure la couverture des propriétaires et des preuves,
+  présente la posture par équipe et exporte un pack de gouvernance JSON.
+
+Les vues Enterprise reflètent uniquement les données réellement chargées.
+L’interface ne simule pas de SSO, de synchronisation multi-utilisateurs ni de
+connexion à un annuaire d’entreprise.
+
 > Le moteur actuel réalise une **analyse statique locale** des configurations.
 > Il ne remplace pas un test d’intrusion, une revue des permissions réellement
 > accordées ni une surveillance d’exécution.
@@ -131,7 +147,7 @@ npm run build
 ## Exceptions de risque
 
 Une correction qui ne peut pas être appliquée immédiatement peut être placée
-sous exception depuis le détail de l’écart. Secure MPC exige :
+sous exception depuis le détail de l’écart. MCP TrustMap exige :
 
 - un motif explicite et, idéalement, une référence de suivi ;
 - un responsable identifié ;
@@ -248,7 +264,7 @@ npm run collect -- --sbom
 
 ### Inventaire supply chain et SBOM
 
-Secure MPC reconnaît les lanceurs suivants sans les exécuter :
+MCP TrustMap reconnaît les lanceurs suivants sans les exécuter :
 
 - npm : `npx`, `npm exec`, `pnpm dlx`, `yarn dlx` et `bunx` ;
 - Python : `uvx` et `pipx run` ;
@@ -317,7 +333,7 @@ et rattachés aux serveurs, directs comme transitifs :
 npm run collect -- --provenance
 ```
 
-Pour chaque composant, Secure MPC :
+Pour chaque composant, MCP TrustMap :
 
 1. exige que l’intégrité SRI du lockfile corresponde à `dist.integrity` ;
 2. vérifie la signature ECDSA du registre sur
@@ -415,7 +431,7 @@ la voie GitHub continue d’utiliser `gh`.
 
 Les références d’images peuvent être transmises au registre et au service de
 confiance choisi. Pour un registre privé, `cosign` ou `gh` peut réutiliser ses
-propres identifiants déjà configurés ; Secure MPC ne lit ni ne conserve ces
+propres identifiants déjà configurés ; MCP TrustMap ne lit ni ne conserve ces
 identifiants.
 
 ### Admission Kubernetes
@@ -643,7 +659,7 @@ ou élevé est détecté :
 ```bash
 npm run audit:ci -- \
   --path ./.mcp.json \
-  --sarif ./secure-mpc.sarif
+  --sarif ./mcp-trustmap.sarif
 ```
 
 Le seuil peut être adapté avec `--fail-on critical|high|medium`. Utilisez
@@ -669,10 +685,10 @@ steps:
   - name: Audit MCP
     run: npm run audit:ci -- --path ./.mcp.json --sarif
   - name: Publier le rapport SARIF
-    if: always() && hashFiles('secure-mpc.sarif') != ''
+    if: always() && hashFiles('mcp-trustmap.sarif') != ''
     uses: github/codeql-action/upload-sarif@v4
     with:
-      sarif_file: secure-mpc.sarif
+      sarif_file: mcp-trustmap.sarif
 ```
 
 Les codes de sortie sont stables : `0` pour un contrôle réussi, `1` pour une
diff --git a/app/globals.css b/app/globals.css
index 9ef6a0b..89b2f17 100644
--- a/app/globals.css
+++ b/app/globals.css
@@ -39,7 +39,8 @@ body {
 
 button,
 input,
-textarea {
+textarea,
+select {
   color: inherit;
   font: inherit;
 }
@@ -1112,6 +1113,627 @@ button.table-row:hover {
   padding: 25px 0 0;
 }
 
+.audit-subnav {
+  align-items: center;
+  border-bottom: 1px solid var(--line);
+  display: flex;
+  gap: 4px;
+  min-height: 54px;
+  overflow-x: auto;
+}
+
+.audit-subnav button {
+  background: transparent;
+  border: 0;
+  border-bottom: 2px solid transparent;
+  color: var(--muted);
+  font-size: 11px;
+  font-weight: 650;
+  height: 54px;
+  padding: 0 14px;
+  white-space: nowrap;
+}
+
+.audit-subnav button:hover,
+.audit-subnav button.active {
+  color: var(--ink);
+}
+
+.audit-subnav button.active {
+  border-bottom-color: var(--green);
+}
+
+.module-view {
+  display: flex;
+  flex-direction: column;
+  gap: 20px;
+  padding-top: 30px;
+}
+
+.module-hero {
+  align-items: flex-end;
+  background:
+    radial-gradient(circle at 88% 12%, rgba(36, 87, 214, 0.12), transparent 30%),
+    linear-gradient(135deg, #15241f 0%, #1b3028 100%);
+  border-radius: 18px;
+  color: #fff;
+  display: flex;
+  gap: 32px;
+  justify-content: space-between;
+  min-height: 220px;
+  overflow: hidden;
+  padding: 34px 38px;
+  position: relative;
+}
+
+.module-hero > div:first-child {
+  max-width: 690px;
+  position: relative;
+  z-index: 1;
+}
+
+.module-hero h2 {
+  font-size: clamp(27px, 3.2vw, 45px);
+  letter-spacing: -0.055em;
+  line-height: 1.03;
+  margin: 12px 0 16px;
+}
+
+.module-hero p {
+  color: rgba(255, 255, 255, 0.69);
+  font-size: 13px;
+  line-height: 1.65;
+  margin: 0;
+  max-width: 650px;
+}
+
+.module-badge {
+  background: rgba(255, 255, 255, 0.1);
+  border: 1px solid rgba(255, 255, 255, 0.14);
+  border-radius: 99px;
+  color: #b9ead3;
+  display: inline-flex;
+  font-size: 9px;
+  font-weight: 760;
+  letter-spacing: 0.14em;
+  padding: 7px 10px;
+}
+
+.module-actions {
+  display: flex;
+  flex: 0 0 auto;
+  gap: 9px;
+  position: relative;
+  z-index: 1;
+}
+
+.module-hero .button.primary {
+  background: #f7fff9;
+  color: #173227;
+}
+
+.module-hero .button.secondary {
+  background: rgba(255, 255, 255, 0.08);
+  border-color: rgba(255, 255, 255, 0.2);
+  color: #fff;
+}
+
+.module-kpis,
+.readiness-grid {
+  display: grid;
+  gap: 12px;
+  grid-template-columns: repeat(4, minmax(0, 1fr));
+}
+
+.module-kpis article {
+  background: var(--paper);
+  border: 1px solid var(--line);
+  border-radius: 13px;
+  display: flex;
+  flex-direction: column;
+  min-height: 118px;
+  padding: 18px;
+}
+
+.module-kpis span {
+  color: var(--muted);
+  font-size: 10px;
+  font-weight: 650;
+}
+
+.module-kpis strong {
+  font-size: 30px;
+  letter-spacing: -0.05em;
+  margin: 12px 0 3px;
+}
+
+.module-kpis small {
+  color: var(--subtle);
+  font-size: 9px;
+}
+
+.module-grid,
+.ci-layout,
+.enterprise-layout {
+  display: grid;
+  gap: 16px;
+  grid-template-columns: repeat(2, minmax(0, 1fr));
+}
+
+.module-card {
+  background: var(--paper);
+  border: 1px solid var(--line);
+  border-radius: 15px;
+  box-shadow: var(--shadow);
+  min-width: 0;
+  padding: 22px;
+}
+
+.module-card-head {
+  align-items: flex-start;
+  display: flex;
+  gap: 16px;
+  justify-content: space-between;
+  margin-bottom: 20px;
+}
+
+.module-card-head h3 {
+  font-size: 17px;
+  letter-spacing: -0.035em;
+  margin: 0;
+}
+
+.module-card-head > small {
+  color: var(--subtle);
+  font-size: 9px;
+}
+
+.distribution-list {
+  display: flex;
+  flex-direction: column;
+  gap: 15px;
+}
+
+.distribution-list > div {
+  align-items: center;
+  display: grid;
+  gap: 12px;
+  grid-template-columns: minmax(105px, 1fr) minmax(80px, 2fr) 38px;
+}
+
+.distribution-list span {
+  display: flex;
+  flex-direction: column;
+}
+
+.distribution-list strong {
+  font-size: 11px;
+}
+
+.distribution-list small,
+.transport-grid small {
+  color: var(--subtle);
+  font-size: 9px;
+  margin-top: 2px;
+}
+
+.distribution-list i {
+  background: var(--paper-soft);
+  border-radius: 99px;
+  height: 6px;
+  overflow: hidden;
+}
+
+.distribution-list b {
+  background: var(--green);
+  border-radius: inherit;
+  display: block;
+  height: 100%;
+}
+
+.distribution-list em {
+  color: var(--muted);
+  font-size: 10px;
+  font-style: normal;
+  text-align: right;
+}
+
+.transport-grid {
+  display: grid;
+  gap: 10px;
+  grid-template-columns: repeat(2, minmax(0, 1fr));
+}
+
+.transport-grid > div {
+  background: var(--ivory);
+  border: 1px solid var(--line);
+  border-radius: 11px;
+  display: grid;
+  grid-template-columns: 30px 1fr;
+  padding: 13px;
+}
+
+.transport-grid > div > span {
+  align-items: center;
+  background: var(--green-soft);
+  border-radius: 8px;
+  color: var(--green-dark);
+  display: inline-flex;
+  grid-row: 1 / span 2;
+  height: 28px;
+  justify-content: center;
+  margin-right: 9px;
+  width: 28px;
+}
+
+.transport-grid strong {
+  font-size: 11px;
+}
+
+.inventory-list {
+  display: flex;
+  flex-direction: column;
+}
+
+.inventory-list > button {
+  align-items: center;
+  background: transparent;
+  border: 0;
+  border-top: 1px solid var(--line);
+  display: grid;
+  gap: 14px;
+  grid-template-columns: 38px minmax(160px, 1fr) 90px 75px 16px;
+  min-height: 64px;
+  padding: 9px 4px;
+  text-align: left;
+}
+
+.inventory-list > button:hover {
+  background: var(--ivory);
+}
+
+.inventory-list > button > span:not(.server-icon, .inventory-status) {
+  display: flex;
+  flex-direction: column;
+}
+
+.inventory-list strong {
+  font-size: 11px;
+}
+
+.inventory-list small {
+  color: var(--subtle);
+  font-size: 9px;
+}
+
+.inventory-list b {
+  color: var(--subtle);
+  font-weight: 500;
+}
+
+.inventory-status {
+  border-radius: 99px;
+  font-size: 9px;
+  font-weight: 750;
+  padding: 5px 8px;
+  text-align: center;
+}
+
+.inventory-status.secure {
+  background: var(--green-soft);
+  color: var(--green-dark);
+}
+
+.inventory-status.attention {
+  background: var(--amber-soft);
+  color: var(--amber);
+}
+
+.inventory-status.critical {
+  background: var(--coral-soft);
+  color: var(--coral);
+}
+
+.gate-preview {
+  align-items: center;
+  border: 1px solid rgba(255, 255, 255, 0.16);
+  border-radius: 13px;
+  display: flex;
+  flex: 0 0 310px;
+  gap: 13px;
+  padding: 16px;
+  position: relative;
+  z-index: 1;
+}
+
+.gate-preview > span {
+  align-items: center;
+  border-radius: 10px;
+  display: inline-flex;
+  flex: 0 0 auto;
+  font-size: 18px;
+  font-weight: 760;
+  height: 38px;
+  justify-content: center;
+  width: 38px;
+}
+
+.gate-preview.passed > span {
+  background: rgba(64, 195, 133, 0.18);
+  color: #85e1b2;
+}
+
+.gate-preview.blocked > span {
+  background: rgba(240, 96, 82, 0.18);
+  color: #ff9489;
+}
+
+.gate-preview small {
+  color: rgba(255, 255, 255, 0.55);
+  display: block;
+  font-size: 8px;
+  letter-spacing: 0.1em;
+  margin-bottom: 4px;
+}
+
+.gate-preview strong {
+  display: block;
+  font-size: 12px;
+}
+
+.gate-preview p {
+  font-size: 9px;
+  line-height: 1.4;
+  margin-top: 4px;
+}
+
+.policy-builder {
+  display: flex;
+  flex-direction: column;
+}
+
+.policy-builder > label {
+  color: var(--muted);
+  display: flex;
+  flex-direction: column;
+  font-size: 10px;
+  font-weight: 650;
+  gap: 7px;
+  margin-bottom: 14px;
+}
+
+.policy-builder input:not([type="checkbox"]),
+.policy-builder select {
+  background: var(--ivory);
+  border: 1px solid var(--line-strong);
+  border-radius: 9px;
+  font-size: 11px;
+  min-height: 40px;
+  padding: 0 11px;
+}
+
+.policy-checks {
+  border-top: 1px solid var(--line);
+  display: flex;
+  flex-direction: column;
+  margin-top: 3px;
+  padding-top: 8px;
+}
+
+.policy-checks label {
+  align-items: center;
+  cursor: pointer;
+  display: flex;
+  gap: 10px;
+  min-height: 48px;
+}
+
+.policy-checks input {
+  accent-color: var(--green);
+  height: 16px;
+  width: 16px;
+}
+
+.policy-checks span {
+  display: flex;
+  flex-direction: column;
+}
+
+.policy-checks strong {
+  font-size: 10px;
+}
+
+.policy-checks small {
+  color: var(--subtle);
+  font-size: 8px;
+  margin-top: 2px;
+}
+
+.workflow-card pre {
+  background: #111b18;
+  border-radius: 11px;
+  color: #dff0e7;
+  font-size: 9px;
+  line-height: 1.55;
+  margin: 0;
+  max-height: 500px;
+  overflow: auto;
+  padding: 17px;
+  white-space: pre;
+}
+
+.command-card {
+  align-items: center;
+  background: #e9eefc;
+  border: 1px solid #cdd8f6;
+  border-radius: 13px;
+  display: flex;
+  gap: 20px;
+  justify-content: space-between;
+  padding: 17px 20px;
+}
+
+.command-card code {
+  color: #1d3f9f;
+  display: block;
+  font-size: 10px;
+  overflow-wrap: anywhere;
+}
+
+.readiness-score {
+  align-items: baseline;
+  display: flex;
+  flex: 0 0 auto;
+  position: relative;
+}
+
+.readiness-score span {
+  color: rgba(255, 255, 255, 0.58);
+  font-size: 8px;
+  letter-spacing: 0.12em;
+  position: absolute;
+  right: 0;
+  top: -2px;
+  white-space: nowrap;
+}
+
+.readiness-score strong {
+  font-size: 76px;
+  letter-spacing: -0.09em;
+  line-height: 1;
+}
+
+.readiness-score small {
+  color: rgba(255, 255, 255, 0.55);
+  font-size: 13px;
+}
+
+.readiness-grid article {
+  align-items: center;
+  background: var(--paper);
+  border: 1px solid var(--line);
+  border-radius: 13px;
+  display: flex;
+  gap: 12px;
+  min-height: 105px;
+  padding: 15px;
+}
+
+.readiness-grid article > span {
+  align-items: center;
+  border-radius: 9px;
+  display: inline-flex;
+  flex: 0 0 auto;
+  font-weight: 750;
+  height: 32px;
+  justify-content: center;
+  width: 32px;
+}
+
+.readiness-grid article.ready > span {
+  background: var(--green-soft);
+  color: var(--green-dark);
+}
+
+.readiness-grid article.attention > span {
+  background: var(--coral-soft);
+  color: var(--coral);
+}
+
+.readiness-grid small {
+  color: var(--muted);
+  display: block;
+  font-size: 9px;
+}
+
+.readiness-grid strong {
+  display: block;
+  font-size: 20px;
+  margin: 3px 0;
+}
+
+.readiness-grid p {
+  color: var(--subtle);
+  font-size: 8px;
+  margin: 0;
+}
+
+.owner-table {
+  display: flex;
+  flex-direction: column;
+}
+
+.owner-row {
+  align-items: center;
+  border-top: 1px solid var(--line);
+  display: grid;
+  font-size: 10px;
+  gap: 8px;
+  grid-template-columns: minmax(120px, 1fr) 65px 70px 65px;
+  min-height: 48px;
+}
+
+.owner-row > span {
+  color: var(--muted);
+}
+
+.owner-head {
+  border-top: 0;
+  color: var(--subtle);
+  font-size: 8px;
+  font-weight: 700;
+  min-height: 28px;
+  text-transform: uppercase;
+}
+
+.danger-text {
+  color: var(--coral) !important;
+  font-weight: 750;
+}
+
+.success-text {
+  color: var(--green) !important;
+  font-weight: 750;
+}
+
+.governance-card {
+  display: flex;
+  flex-direction: column;
+}
+
+.governance-stat {
+  align-items: center;
+  border-top: 1px solid var(--line);
+  display: flex;
+  justify-content: space-between;
+  min-height: 54px;
+}
+
+.governance-stat span {
+  color: var(--muted);
+  font-size: 10px;
+}
+
+.governance-stat strong {
+  font-size: 21px;
+}
+
+.governance-card > p {
+  color: var(--muted);
+  font-size: 10px;
+  line-height: 1.55;
+}
+
+.governance-card .button {
+  margin-top: auto;
+}
+
+.enterprise-note {
+  color: var(--subtle);
+  font-size: 9px;
+  margin: -4px 3px 0;
+}
+
 .view-intro {
   align-items: flex-end;
   display: flex;
@@ -2739,6 +3361,16 @@ button.table-row:hover {
   .history-layout {
     grid-template-columns: 1fr;
   }
+
+  .module-hero {
+    align-items: flex-start;
+    flex-direction: column;
+  }
+
+  .module-kpis,
+  .readiness-grid {
+    grid-template-columns: repeat(2, minmax(0, 1fr));
+  }
 }
 
 @media (max-width: 820px) {
@@ -2826,6 +3458,25 @@ button.table-row:hover {
     flex-direction: column;
     gap: 15px;
   }
+
+  .module-grid,
+  .ci-layout,
+  .enterprise-layout {
+    grid-template-columns: 1fr;
+  }
+
+  .gate-preview {
+    flex-basis: auto;
+    width: 100%;
+  }
+
+  .inventory-list > button {
+    grid-template-columns: 38px minmax(120px, 1fr) 70px 16px;
+  }
+
+  .inventory-list > button > span:nth-child(3) {
+    display: none;
+  }
 }
 
 @media (max-width: 560px) {
@@ -2969,6 +3620,60 @@ button.table-row:hover {
   .exception-form-grid {
     grid-template-columns: 1fr;
   }
+
+  .module-view {
+    padding-top: 18px;
+  }
+
+  .module-hero {
+    min-height: 0;
+    padding: 24px 21px;
+  }
+
+  .module-hero h2 {
+    font-size: 29px;
+  }
+
+  .module-actions,
+  .command-card {
+    align-items: stretch;
+    flex-direction: column;
+    width: 100%;
+  }
+
+  .module-kpis,
+  .readiness-grid {
+    grid-template-columns: 1fr;
+  }
+
+  .module-kpis article {
+    min-height: 94px;
+  }
+
+  .transport-grid {
+    grid-template-columns: 1fr;
+  }
+
+  .inventory-card {
+    padding: 16px;
+  }
+
+  .inventory-list > button {
+    gap: 9px;
+    grid-template-columns: 34px minmax(110px, 1fr) 64px;
+  }
+
+  .inventory-list > button > b {
+    display: none;
+  }
+
+  .owner-row {
+    grid-template-columns: minmax(105px, 1fr) 55px 55px;
+  }
+
+  .owner-row > span:nth-child(2) {
+    display: none;
+  }
 }
 
 @media (prefers-reduced-motion: reduce) {
diff --git a/app/layout.tsx b/app/layout.tsx
index 2a48e68..c19b317 100644
--- a/app/layout.tsx
+++ b/app/layout.tsx
@@ -20,9 +20,9 @@ export async function generateMetadata(): Promise<Metadata> {
   const protocol =
     forwardedProtocol ?? (host.startsWith("localhost") ? "http" : "https");
   const baseUrl = new URL(`${protocol}://${host}`);
-  const title = "Secure MPC — Audit de sécurité MCP";
+  const title = "MCP TrustMap — Cartographie, audit et gouvernance MCP";
   const description =
-    "Analysez la configuration de vos serveurs MCP, priorisez les risques et appliquez des correctifs concrets.";
+    "Découvrez vos serveurs MCP, auditez leur sécurité, appliquez une politique CI et pilotez leur gouvernance.";
 
   return {
     metadataBase: baseUrl,
@@ -37,7 +37,7 @@ export async function generateMetadata(): Promise<Metadata> {
           url: new URL("/og.png", baseUrl).toString(),
           width: 1732,
           height: 908,
-          alt: "Secure MPC — Vos serveurs MCP, sous contrôle.",
+          alt: "MCP TrustMap — Vos serveurs MCP, sous contrôle.",
         },
       ],
     },
diff --git a/app/page.tsx b/app/page.tsx
index 2d79e6b..431cd39 100644
--- a/app/page.tsx
+++ b/app/page.tsx
@@ -42,8 +42,12 @@ import {
   type AuditHistorySource,
 } from "../lib/audit-history";
 import { AuditHistoryView } from "./audit-history-view";
+import { TrustMapDiscover } from "./trustmap-discover";
+import { TrustMapCi } from "./trustmap-ci";
+import { TrustMapEnterprise } from "./trustmap-enterprise";
 
-type View = "overview" | "servers" | "rules" | "history";
+type View = "discover" | "audit" | "ci" | "enterprise";
+type AuditView = "overview" | "servers" | "rules" | "history";
 
 type ExceptionDraft = {
   findingKey: string;
@@ -54,9 +58,11 @@ type ExceptionDraft = {
   maximumExpiresOn: string;
 };
 
-const RISK_EXCEPTIONS_STORAGE_KEY = "secure-mpc.risk-exceptions.v1";
-const LEGACY_RISK_EXCEPTIONS_STORAGE_KEY =
-  "mcp-sentinel.risk-exceptions.v1";
+const RISK_EXCEPTIONS_STORAGE_KEY = "mcp-trustmap.risk-exceptions.v1";
+const LEGACY_RISK_EXCEPTIONS_STORAGE_KEYS = [
+  ["secure", "mpc.risk-exceptions.v1"].join("-"),
+  "mcp-sentinel.risk-exceptions.v1",
+] as const;
 
 function dateInputValue(date: Date): string {
   const offset = date.getTimezoneOffset() * 60_000;
@@ -380,7 +386,7 @@ const sampleConfig = `{
 function BrandMark() {
   return (
     <span className="brand-mark" aria-hidden="true">
-      M
+      T
     </span>
   );
 }
@@ -391,7 +397,8 @@ function StatusDot({ status }: { status: ServerStatus }) {
 
 export default function Home() {
   const [servers, setServers] = useState<McpServer[]>(demoServers);
-  const [view, setView] = useState<View>("overview");
+  const [view, setView] = useState<View>("audit");
+  const [auditView, setAuditView] = useState<AuditView>("overview");
   const [filter, setFilter] = useState<"all" | ServerStatus>("all");
   const [search, setSearch] = useState("");
   const [selectedServer, setSelectedServer] = useState<McpServer | null>(null);
@@ -417,9 +424,12 @@ export default function Home() {
       const savedExceptions = window.localStorage.getItem(
         RISK_EXCEPTIONS_STORAGE_KEY,
       );
-      const legacyExceptions = window.localStorage.getItem(
-        LEGACY_RISK_EXCEPTIONS_STORAGE_KEY,
+      const legacyKey = LEGACY_RISK_EXCEPTIONS_STORAGE_KEYS.find((key) =>
+        window.localStorage.getItem(key),
       );
+      const legacyExceptions = legacyKey
+        ? window.localStorage.getItem(legacyKey)
+        : null;
       setRiskExceptions(
         parseRiskExceptions(savedExceptions ?? legacyExceptions),
       );
@@ -429,8 +439,8 @@ export default function Home() {
             RISK_EXCEPTIONS_STORAGE_KEY,
             legacyExceptions,
           );
-          window.localStorage.removeItem(
-            LEGACY_RISK_EXCEPTIONS_STORAGE_KEY,
+          LEGACY_RISK_EXCEPTIONS_STORAGE_KEYS.forEach((key) =>
+            window.localStorage.removeItem(key),
           );
         } catch {
           // The persistence effect below will retry without blocking startup.
@@ -848,8 +858,8 @@ export default function Home() {
         const date = generatedAt.toISOString().slice(0, 10);
         fileName =
           format === "cyclonedx"
-            ? `secure-mpc-${date}.cdx.json`
-            : `secure-mpc-${date}.${format}`;
+            ? `mcp-trustmap-${date}.cdx.json`
+            : `mcp-trustmap-${date}.${format}`;
         successMessage =
           format === "sarif"
             ? "Rapport SARIF exporté"
@@ -877,25 +887,37 @@ export default function Home() {
   };
 
   const navItems: { id: View; label: string; icon: string }[] = [
-    { id: "overview", label: "Vue d’ensemble", icon: "⌂" },
-    { id: "servers", label: "Serveurs", icon: "▦" },
-    { id: "rules", label: "Règles de sécurité", icon: "✓" },
-    { id: "history", label: "Historique", icon: "↗" },
+    { id: "discover", label: "TrustMap Discover", icon: "◎" },
+    { id: "audit", label: "TrustMap Audit", icon: "✓" },
+    { id: "ci", label: "TrustMap CI", icon: "⌘" },
+    { id: "enterprise", label: "TrustMap Enterprise", icon: "◇" },
   ];
 
+  const auditNavItems: { id: AuditView; label: string }[] = [
+    { id: "overview", label: "Vue d’ensemble" },
+    { id: "servers", label: "Serveurs" },
+    { id: "rules", label: "Référentiel" },
+    { id: "history", label: "Historique & exceptions" },
+  ];
+
+  const notify = (message: string) => {
+    setToast(message);
+    window.setTimeout(() => setToast(""), 2600);
+  };
+
   return (
     <div className="app-shell">
       <aside className="sidebar">
         <div className="brand">
           <BrandMark />
           <div>
-            <strong>Secure MPC</strong>
-            <span>Security workspace</span>
+            <strong>MCP TrustMap</strong>
+            <span>Trust & security workspace</span>
           </div>
         </div>
 
         <nav className="nav" aria-label="Navigation principale">
-          <span className="nav-label">SURVEILLANCE</span>
+          <span className="nav-label">MODULES</span>
           {navItems.map((item) => (
             <button
               className={view === item.id ? "active" : ""}
@@ -904,7 +926,7 @@ export default function Home() {
             >
               <span aria-hidden="true">{item.icon}</span>
               {item.label}
-              {item.id === "servers" && (
+              {item.id === "discover" && (
                 <small>{servers.length}</small>
               )}
             </button>
@@ -940,10 +962,10 @@ export default function Home() {
           <div>
             <p className="eyebrow">ESPACE DE TRAVAIL / PRODUCTION</p>
             <h1>
-              {view === "overview" && "Vue d’ensemble"}
-              {view === "servers" && "Serveurs MCP"}
-              {view === "rules" && "Règles de sécurité"}
-              {view === "history" && "Historique des audits"}
+              {view === "discover" && "TrustMap Discover"}
+              {view === "audit" && "TrustMap Audit"}
+              {view === "ci" && "TrustMap CI"}
+              {view === "enterprise" && "TrustMap Enterprise"}
             </h1>
           </div>
           <div className="topbar-actions">
@@ -951,7 +973,7 @@ export default function Home() {
               <i aria-hidden="true" />
               Dernier audit : {lastAudit}
             </span>
-            <details className="export-menu">
+            {view === "audit" && <details className="export-menu">
               <summary className="button secondary">
                 <span aria-hidden="true">↓</span>
                 Exporter
@@ -986,28 +1008,8 @@ export default function Home() {
                   </span>
                 </button>
               </div>
-            </details>
-            <button
-              className="button secondary"
-              onClick={() => {
-                setImportError("");
-                setDiscoveryOpen(true);
-              }}
-            >
-              <span aria-hidden="true">◎</span>
-              Découvrir
-            </button>
-            <button
-              className="button secondary"
-              onClick={() => {
-                setImportError("");
-                setImportOpen(true);
-              }}
-            >
-              <span aria-hidden="true">＋</span>
-              Importer
-            </button>
-            <button
+            </details>}
+            {view === "audit" && <button
               className="button primary"
               onClick={runAudit}
               disabled={scanning}
@@ -1016,11 +1018,40 @@ export default function Home() {
                 ↻
               </span>
               {scanning ? "Analyse…" : "Lancer un audit"}
-            </button>
+            </button>}
           </div>
         </header>
 
-        {view === "overview" && (
+        {view === "discover" && (
+          <TrustMapDiscover
+            servers={servers}
+            onDiscover={() => {
+              setImportError("");
+              setDiscoveryOpen(true);
+            }}
+            onImport={() => {
+              setImportError("");
+              setImportOpen(true);
+            }}
+            onSelect={setSelectedServer}
+          />
+        )}
+
+        {view === "audit" && (
+          <nav className="audit-subnav" aria-label="Sections de TrustMap Audit">
+            {auditNavItems.map((item) => (
+              <button
+                key={item.id}
+                className={auditView === item.id ? "active" : ""}
+                onClick={() => setAuditView(item.id)}
+              >
+                {item.label}
+              </button>
+            ))}
+          </nav>
+        )}
+
+        {view === "audit" && auditView === "overview" && (
           <>
             <section className="hero-grid" aria-label="Indicateurs de sécurité">
               <article className="score-card">
@@ -1101,7 +1132,7 @@ export default function Home() {
                 search={search}
                 setSearch={setSearch}
                 onSelect={setSelectedServer}
-                onSeeAll={() => setView("servers")}
+                onSeeAll={() => setAuditView("servers")}
               />
               <RemediationPanel
                 items={priorityFindings.slice(0, 4)}
@@ -1121,7 +1152,7 @@ export default function Home() {
                 <strong>Analyse locale et respectueuse de vos secrets</strong>
                 <p>
                   Les configurations importées sont analysées dans votre
-                  navigateur. Secure MPC n’affiche jamais les valeurs
+                  navigateur. MCP TrustMap n’affiche jamais les valeurs
                   sensibles détectées.
                 </p>
               </div>
@@ -1130,7 +1161,7 @@ export default function Home() {
           </>
         )}
 
-        {view === "servers" && (
+        {view === "audit" && auditView === "servers" && (
           <section className="single-view">
             <div className="view-intro">
               <div>
@@ -1166,7 +1197,7 @@ export default function Home() {
           </section>
         )}
 
-        {view === "rules" && (
+        {view === "audit" && auditView === "rules" && (
           <section className="single-view">
             <div className="view-intro">
               <div>
@@ -1198,7 +1229,7 @@ export default function Home() {
           </section>
         )}
 
-        {view === "history" && (
+        {view === "audit" && auditView === "history" && (
           <section className="single-view">
             <div className="view-intro">
               <div>
@@ -1274,6 +1305,22 @@ export default function Home() {
             </article>
           </section>
         )}
+
+        {view === "ci" && (
+          <TrustMapCi
+            servers={servers}
+            exceptions={riskExceptions}
+            onNotify={notify}
+          />
+        )}
+
+        {view === "enterprise" && (
+          <TrustMapEnterprise
+            servers={servers}
+            exceptions={riskExceptions}
+            onNotify={notify}
+          />
+        )}
       </main>
 
       {importOpen && (
diff --git a/app/trustmap-ci.tsx b/app/trustmap-ci.tsx
new file mode 100644
index 0000000..4fbc43f
--- /dev/null
+++ b/app/trustmap-ci.tsx
@@ -0,0 +1,106 @@
+"use client";
+
+import { useMemo, useState } from "react";
+import type { McpServer, Severity } from "../lib/audit-engine";
+import type { RiskException } from "../lib/finding-exceptions";
+import {
+  createCiCommand,
+  createGithubActionsWorkflow,
+  evaluateCiGate,
+  type TrustMapCiOptions,
+} from "../lib/trustmap-modules";
+
+export function TrustMapCi({
+  servers,
+  exceptions,
+  onNotify,
+}: {
+  servers: McpServer[];
+  exceptions: RiskException[];
+  onNotify: (message: string) => void;
+}) {
+  const [options, setOptions] = useState<TrustMapCiOptions>({
+    configPath: "./.mcp.json",
+    failOn: "high",
+    sarif: true,
+    sbom: true,
+    osv: false,
+    provenance: true,
+    requireServers: true,
+  });
+  const command = useMemo(() => createCiCommand(options), [options]);
+  const workflow = useMemo(() => createGithubActionsWorkflow(options), [options]);
+  const gate = useMemo(
+    () => evaluateCiGate(servers, exceptions, options.failOn),
+    [exceptions, options.failOn, servers],
+  );
+
+  const copy = async (value: string, label: string) => {
+    await navigator.clipboard.writeText(value);
+    onNotify(`${label} copié dans le presse-papiers`);
+  };
+
+  return (
+    <section className="module-view ci-view">
+      <div className="module-hero">
+        <div>
+          <span className="module-badge">TRUSTMAP CI</span>
+          <h2>Transformez vos règles MCP en garde-fou de livraison.</h2>
+          <p>
+            Configurez un seuil, générez un workflow GitHub Actions et publiez
+            les écarts dans Code Scanning avec un rapport SARIF.
+          </p>
+        </div>
+        <div className={`gate-preview ${gate.passed ? "passed" : "blocked"}`}>
+          <span>{gate.passed ? "✓" : "!"}</span>
+          <div><small>SIMULATION SUR L’INVENTAIRE</small><strong>{gate.passed ? "Livraison autorisée" : "Livraison bloquée"}</strong><p>{gate.label}</p></div>
+        </div>
+      </div>
+
+      <div className="ci-layout">
+        <article className="module-card policy-builder">
+          <div className="module-card-head"><div><span className="section-kicker">POLITIQUE</span><h3>Composer le contrôle</h3></div></div>
+          <label>
+            Chemin de la configuration
+            <input value={options.configPath} onChange={(event) => setOptions({ ...options, configPath: event.target.value })} />
+          </label>
+          <label>
+            Bloquer à partir de
+            <select value={options.failOn} onChange={(event) => setOptions({ ...options, failOn: event.target.value as Severity })}>
+              <option value="critical">Critique</option>
+              <option value="high">Élevé</option>
+              <option value="medium">Modéré</option>
+            </select>
+          </label>
+          <div className="policy-checks">
+            {([
+              ["requireServers", "Exiger au moins un serveur"],
+              ["provenance", "Vérifier signatures et provenance"],
+              ["osv", "Interroger OSV pour les vulnérabilités"],
+              ["sbom", "Produire un SBOM CycloneDX"],
+              ["sarif", "Publier un rapport SARIF"],
+            ] as const).map(([key, label]) => (
+              <label key={key}>
+                <input type="checkbox" checked={options[key]} onChange={(event) => setOptions({ ...options, [key]: event.target.checked })} />
+                <span><strong>{label}</strong><small>{key === "osv" ? "Requête réseau explicite" : "Activé dans le collecteur"}</small></span>
+              </label>
+            ))}
+          </div>
+        </article>
+
+        <article className="module-card workflow-card">
+          <div className="module-card-head">
+            <div><span className="section-kicker">GITHUB ACTIONS</span><h3>Workflow prêt à versionner</h3></div>
+            <button className="text-button" onClick={() => copy(workflow, "Workflow")}>Copier</button>
+          </div>
+          <pre><code>{workflow}</code></pre>
+        </article>
+      </div>
+
+      <article className="command-card">
+        <div><span className="section-kicker">COMMANDE ÉQUIVALENTE</span><code>{command}</code></div>
+        <button className="button secondary" onClick={() => copy(command, "Commande CI")}>Copier</button>
+      </article>
+    </section>
+  );
+}
diff --git a/app/trustmap-discover.tsx b/app/trustmap-discover.tsx
new file mode 100644
index 0000000..f287e3c
--- /dev/null
+++ b/app/trustmap-discover.tsx
@@ -0,0 +1,96 @@
+import type { McpServer } from "../lib/audit-engine";
+import { createDiscoverSummary } from "../lib/trustmap-modules";
+
+export function TrustMapDiscover({
+  servers,
+  onDiscover,
+  onImport,
+  onSelect,
+}: {
+  servers: McpServer[];
+  onDiscover: () => void;
+  onImport: () => void;
+  onSelect: (server: McpServer) => void;
+}) {
+  const summary = createDiscoverSummary(servers);
+
+  return (
+    <section className="module-view discover-view">
+      <div className="module-hero">
+        <div>
+          <span className="module-badge">TRUSTMAP DISCOVER</span>
+          <h2>Cartographiez chaque serveur MCP avant qu’il ne devienne une zone d’ombre.</h2>
+          <p>
+            Regroupez les configurations locales, les transports et les composants
+            logiciels dans un inventaire unique, sans exécuter les serveurs stdio.
+          </p>
+        </div>
+        <div className="module-actions">
+          <button className="button primary" onClick={onDiscover}>
+            Lancer la découverte
+          </button>
+          <button className="button secondary" onClick={onImport}>
+            Importer un inventaire
+          </button>
+        </div>
+      </div>
+
+      <div className="module-kpis">
+        <article><span>Serveurs découverts</span><strong>{summary.servers}</strong><small>{summary.sources.length} source{summary.sources.length > 1 ? "s" : ""}</small></article>
+        <article><span>Composants suivis</span><strong>{summary.components}</strong><small>{summary.pinnedComponents} verrouillés</small></article>
+        <article><span>Preuves vérifiées</span><strong>{summary.provenanceVerified}</strong><small>Signature ou SLSA</small></article>
+        <article><span>Transports</span><strong>{summary.transports.length}</strong><small>stdio, HTTPS et autres</small></article>
+      </div>
+
+      <div className="module-grid">
+        <article className="module-card">
+          <div className="module-card-head">
+            <div><span className="section-kicker">ORIGINE</span><h3>Sources détectées</h3></div>
+            <span className="count-badge">{summary.sources.length}</span>
+          </div>
+          <div className="distribution-list">
+            {summary.sources.map((source) => (
+              <div key={source.label}>
+                <span><strong>{source.label}</strong><small>{source.count} serveur{source.count > 1 ? "s" : ""}</small></span>
+                <i><b style={{ width: `${source.percentage}%` }} /></i>
+                <em>{source.percentage}%</em>
+              </div>
+            ))}
+          </div>
+        </article>
+        <article className="module-card">
+          <div className="module-card-head">
+            <div><span className="section-kicker">SURFACE</span><h3>Transports exposés</h3></div>
+          </div>
+          <div className="transport-grid">
+            {summary.transports.map((transport) => (
+              <div key={transport.label}>
+                <span aria-hidden="true">{transport.label.toLowerCase().includes("https") ? "↗" : "⌘"}</span>
+                <strong>{transport.label}</strong>
+                <small>{transport.count} serveur{transport.count > 1 ? "s" : ""}</small>
+              </div>
+            ))}
+          </div>
+        </article>
+      </div>
+
+      <article className="module-card inventory-card">
+        <div className="module-card-head">
+          <div><span className="section-kicker">INVENTAIRE ACTUEL</span><h3>Carte des serveurs</h3></div>
+          <small>Sélectionnez un serveur pour ouvrir ses preuves</small>
+        </div>
+        <div className="inventory-list">
+          {servers.map((server) => (
+            <button key={server.id} onClick={() => onSelect(server)}>
+              <span className={`server-icon ${server.status}`}>{server.name.slice(0, 2).toUpperCase()}</span>
+              <span><strong>{server.name}</strong><small>{server.source} · {server.transport}</small></span>
+              <span><strong>{server.components?.length ?? 0}</strong><small>composants</small></span>
+              <span className={`inventory-status ${server.status}`}>{server.score}/100</span>
+              <b aria-hidden="true">→</b>
+            </button>
+          ))}
+        </div>
+      </article>
+    </section>
+  );
+}
diff --git a/app/trustmap-enterprise.tsx b/app/trustmap-enterprise.tsx
new file mode 100644
index 0000000..96dc7bb
--- /dev/null
+++ b/app/trustmap-enterprise.tsx
@@ -0,0 +1,134 @@
+"use client";
+
+import { useMemo } from "react";
+import type { McpServer } from "../lib/audit-engine";
+import type { RiskException } from "../lib/finding-exceptions";
+import {
+  createEnterprisePolicyPack,
+  createEnterpriseSummary,
+} from "../lib/trustmap-modules";
+
+export function TrustMapEnterprise({
+  servers,
+  exceptions,
+  onNotify,
+}: {
+  servers: McpServer[];
+  exceptions: RiskException[];
+  onNotify: (message: string) => void;
+}) {
+  const summary = useMemo(
+    () => createEnterpriseSummary(servers, exceptions),
+    [exceptions, servers],
+  );
+
+  const exportPolicyPack = () => {
+    const payload = JSON.stringify(
+      createEnterprisePolicyPack(servers, exceptions),
+      null,
+      2,
+    );
+    const url = URL.createObjectURL(
+      new Blob([payload], { type: "application/json" }),
+    );
+    const link = document.createElement("a");
+    link.href = url;
+    link.download = `mcp-trustmap-governance-${new Date().toISOString().slice(0, 10)}.json`;
+    link.click();
+    URL.revokeObjectURL(url);
+    onNotify("Pack de gouvernance Enterprise exporté");
+  };
+
+  const readiness = [
+    {
+      label: "Inventaire",
+      value: summary.servers ? "Opérationnel" : "À connecter",
+      ready: summary.servers > 0,
+      detail: `${summary.servers} serveur${summary.servers > 1 ? "s" : ""} sous gestion`,
+    },
+    {
+      label: "Responsabilités",
+      value: `${summary.ownershipCoverage}%`,
+      ready: summary.ownershipCoverage === 100,
+      detail: "Objectif : chaque serveur attribué",
+    },
+    {
+      label: "Supply chain",
+      value: `${summary.provenanceCoverage}%`,
+      ready: summary.provenanceCoverage >= 80,
+      detail: "Objectif : 80 % de preuves vérifiées",
+    },
+    {
+      label: "Risques critiques",
+      value: String(summary.openCritical),
+      ready: summary.openCritical === 0,
+      detail: "Objectif : aucun écart critique ouvert",
+    },
+  ];
+
+  return (
+    <section className="module-view enterprise-view">
+      <div className="module-hero">
+        <div>
+          <span className="module-badge">TRUSTMAP ENTERPRISE</span>
+          <h2>Pilotez la confiance MCP par équipe, preuve et exception.</h2>
+          <p>
+            Mesurez la préparation de votre organisation à partir de données
+            réellement présentes dans cet espace de travail.
+          </p>
+        </div>
+        <div className="readiness-score">
+          <span>INDICE DE PRÉPARATION</span>
+          <strong>{summary.readinessScore}</strong>
+          <small>/ 100</small>
+        </div>
+      </div>
+
+      <div className="readiness-grid">
+        {readiness.map((item) => (
+          <article key={item.label} className={item.ready ? "ready" : "attention"}>
+            <span>{item.ready ? "✓" : "!"}</span>
+            <div><small>{item.label}</small><strong>{item.value}</strong><p>{item.detail}</p></div>
+          </article>
+        ))}
+      </div>
+
+      <div className="enterprise-layout">
+        <article className="module-card owners-card">
+          <div className="module-card-head">
+            <div><span className="section-kicker">RESPONSABILITÉ</span><h3>Posture par propriétaire</h3></div>
+            <span className="count-badge">{summary.owners.length}</span>
+          </div>
+          <div className="owner-table">
+            <div className="owner-row owner-head"><span>Équipe</span><span>Serveurs</span><span>Score</span><span>Critiques</span></div>
+            {summary.owners.map((owner) => (
+              <div className="owner-row" key={owner.owner}>
+                <strong>{owner.owner}</strong>
+                <span>{owner.servers}</span>
+                <span>{owner.averageScore}/100</span>
+                <span className={owner.openCritical ? "danger-text" : "success-text"}>{owner.openCritical}</span>
+              </div>
+            ))}
+          </div>
+        </article>
+
+        <article className="module-card governance-card">
+          <div className="module-card-head"><div><span className="section-kicker">GOUVERNANCE</span><h3>Registre des décisions</h3></div></div>
+          <div className="governance-stat"><span>Exceptions actives</span><strong>{summary.activeExceptions}</strong></div>
+          <div className="governance-stat"><span>Expirent sous 30 jours</span><strong>{summary.expiringExceptions}</strong></div>
+          <p>
+            Le pack exporté contient les objectifs de politique, la posture par
+            responsable et les exceptions actives, sans configuration serveur.
+          </p>
+          <button className="button primary" onClick={exportPolicyPack}>
+            Exporter le pack de gouvernance
+          </button>
+        </article>
+      </div>
+      <p className="enterprise-note">
+        Les fonctions multi-utilisateurs, SSO et synchronisation d’exceptions
+        nécessitent un service d’identité et ne sont pas simulées dans cette version.
+      </p>
+    </section>
+  );
+}
diff --git a/lib/audit-engine.ts b/lib/audit-engine.ts
index 03b2733..c671ed1 100644
--- a/lib/audit-engine.ts
+++ b/lib/audit-engine.ts
@@ -86,7 +86,7 @@ export type AuditReport = {
   schemaVersion: "1.0";
   generatedAt: string;
   generator: {
-    name: "Secure MPC";
+    name: "MCP TrustMap";
     version: string;
   };
   summary: AuditMetrics & {
@@ -710,7 +710,7 @@ export function auditConfiguration(raw: string): McpServer[] {
       : undefined;
   const isCollectorInventory =
     parsedRecord.schemaVersion === "1.0" &&
-    collector?.name === "Secure MPC Collector" &&
+    collector?.name === "MCP TrustMap Collector" &&
     Array.isArray(parsedRecord.servers);
 
   if (isCollectorInventory) {
@@ -1289,7 +1289,7 @@ export function createAuditReport(
     schemaVersion: "1.0",
     generatedAt: generatedAt.toISOString(),
     generator: {
-      name: "Secure MPC",
+      name: "MCP TrustMap",
       version: "1.0.0",
     },
     summary: {
@@ -1333,7 +1333,7 @@ export function createSarifReport(
       {
         tool: {
           driver: {
-            name: "Secure MPC",
+            name: "MCP TrustMap",
             version: "1.0.0",
             informationUri: "https://github.com/mawoole/SecureMPC",
             rules: [...usedRules.values()].map((rule) => ({
diff --git a/lib/ci-gate.ts b/lib/ci-gate.ts
index d49014e..ba29d38 100644
--- a/lib/ci-gate.ts
+++ b/lib/ci-gate.ts
@@ -93,7 +93,7 @@ export function formatSecurityGateSummary(
   maximumDetails = 20,
 ): string {
   const lines = [
-    `[Secure MPC] Contrôle CI : ${result.passed ? "RÉUSSI" : "ÉCHEC"}.`,
+    `[MCP TrustMap] Contrôle CI : ${result.passed ? "RÉUSSI" : "ÉCHEC"}.`,
     `${result.servers} serveur${result.servers === 1 ? "" : "s"} audité${result.servers === 1 ? "" : "s"} ; ${result.findings.critical} critique${result.findings.critical === 1 ? "" : "s"}, ${result.findings.high} élevé${result.findings.high === 1 ? "" : "s"}, ${result.findings.medium} moyen${result.findings.medium === 1 ? "" : "s"}.`,
   ];
 
diff --git a/lib/collector.ts b/lib/collector.ts
index 06f5e6d..8347a42 100644
--- a/lib/collector.ts
+++ b/lib/collector.ts
@@ -103,7 +103,7 @@ export type CollectorInventory = {
   schemaVersion: typeof COLLECTOR_SCHEMA_VERSION;
   generatedAt: string;
   collector: {
-    name: "Secure MPC Collector";
+    name: "MCP TrustMap Collector";
     version: string;
     platform: NodeJS.Platform;
     security: {
@@ -752,7 +752,7 @@ export async function probeConfiguration(
           protocolVersion: MCP_PROTOCOL_VERSION,
           capabilities: {},
           clientInfo: {
-            name: "secure-mpc-collector",
+            name: "mcp-trustmap-collector",
             version: "1.5.0",
           },
         },
@@ -1158,7 +1158,7 @@ export async function collectInventory(
     schemaVersion: COLLECTOR_SCHEMA_VERSION,
     generatedAt: now().toISOString(),
     collector: {
-      name: "Secure MPC Collector",
+      name: "MCP TrustMap Collector",
       version: "1.8.0",
       platform: options.platform ?? process.platform,
       security: {
diff --git a/lib/kubernetes-admission-validation.ts b/lib/kubernetes-admission-validation.ts
index dae1f2d..cfe242b 100644
--- a/lib/kubernetes-admission-validation.ts
+++ b/lib/kubernetes-admission-validation.ts
@@ -78,9 +78,9 @@ function validateClusterImagePolicyDocument(
     manifest.apiVersion !== "policy.sigstore.dev/v1beta1" ||
     manifest.kind !== "ClusterImagePolicy" ||
     typeof metadata.name !== "string" ||
-    typeof annotations["secure-mpc.dev/policy-id"] !== "string" ||
+    typeof annotations["mcp-trustmap.dev/policy-id"] !== "string" ||
     !["signature", "slsa"].includes(
-      String(annotations["secure-mpc.dev/required-proof"]),
+      String(annotations["mcp-trustmap.dev/required-proof"]),
     ) ||
     !Array.isArray(spec.images) ||
     !spec.images.length ||
@@ -88,7 +88,7 @@ function validateClusterImagePolicyDocument(
     !spec.authorities.length
   ) {
     throw new Error(
-      `${context} n’est pas une ClusterImagePolicy Secure MPC complète.`,
+      `${context} n’est pas une ClusterImagePolicy MCP TrustMap complète.`,
     );
   }
 }
diff --git a/lib/kubernetes-admission.ts b/lib/kubernetes-admission.ts
index 12a6887..2dd7182 100644
--- a/lib/kubernetes-admission.ts
+++ b/lib/kubernetes-admission.ts
@@ -153,9 +153,9 @@ function cosignClusterImagePolicy(
     "metadata:",
     `  name: ${yamlString(name)}`,
     "  annotations:",
-    `    secure-mpc.dev/policy-id: ${yamlString(policy.id)}`,
-    `    secure-mpc.dev/image-prefix: ${yamlString(prefix)}`,
-    `    secure-mpc.dev/required-proof: ${yamlString(proof)}`,
+    `    mcp-trustmap.dev/policy-id: ${yamlString(policy.id)}`,
+    `    mcp-trustmap.dev/image-prefix: ${yamlString(prefix)}`,
+    `    mcp-trustmap.dev/required-proof: ${yamlString(proof)}`,
     "spec:",
     "  images:",
     ...imageGlobs(prefix).map((glob) => `  - glob: ${yamlString(glob)}`),
@@ -170,7 +170,7 @@ function githubValues(
   const prefix = normalizeOciImagePrefix(policy.imagePrefix);
   const [organization, repository] = policy.repository.split("/");
   return [
-    "# Généré par Secure MPC. Vérifiez ce fichier avant installation.",
+    "# Généré par MCP TrustMap. Vérifiez ce fichier avant installation.",
     "policy:",
     "  enabled: true",
     `  organization: ${yamlString(organization)}`,
@@ -214,7 +214,7 @@ function instructions(
       policy.kind === "github",
   );
   const lines = [
-    "# Admission Kubernetes générée par Secure MPC",
+    "# Admission Kubernetes générée par MCP TrustMap",
     "",
     "Ce dossier ne modifie aucun cluster. Contrôlez les manifestes dans un environnement de test avant l’activation en production.",
     "",
diff --git a/lib/pdf-report.ts b/lib/pdf-report.ts
index a44c26e..1745650 100644
--- a/lib/pdf-report.ts
+++ b/lib/pdf-report.ts
@@ -146,10 +146,10 @@ export function createAuditPdfReport(
     unit: "mm",
   });
   document.setProperties({
-    title: "Secure MPC - Rapport d'audit de sécurité MCP",
+    title: "MCP TrustMap - Rapport d'audit de sécurité MCP",
     subject: "Posture de sécurité et remédiations des serveurs MCP",
-    author: "Secure MPC",
-    creator: "Secure MPC",
+    author: "MCP TrustMap",
+    creator: "MCP TrustMap",
     keywords: "MCP, sécurité, audit, remédiations",
   });
   document.setCreationDate(generatedAt);
@@ -659,7 +659,7 @@ export function createAuditPdfReport(
     document.setFont("helvetica", "normal");
     document.setFontSize(6.5);
     document.text(
-      `Secure MPC - Analyse statique locale - ${safeText(formatDate(generatedAt))}`,
+      `MCP TrustMap - Analyse statique locale - ${safeText(formatDate(generatedAt))}`,
       MARGIN,
       289,
     );
@@ -670,7 +670,7 @@ export function createAuditPdfReport(
 
   return {
     bytes: new Uint8Array(document.output("arraybuffer")),
-    fileName: `secure-mpc-audit-${generatedAt.toISOString().slice(0, 10)}.pdf`,
+    fileName: `mcp-trustmap-audit-${generatedAt.toISOString().slice(0, 10)}.pdf`,
     pages: totalPages,
     summary,
   };
diff --git a/lib/supply-chain.ts b/lib/supply-chain.ts
index e693d05..168370d 100644
--- a/lib/supply-chain.ts
+++ b/lib/supply-chain.ts
@@ -462,7 +462,7 @@ export function createCycloneDxReport(
   const serverRefs = servers.map(
     (server) => `urn:mcp-server:${encodeURIComponent(server.id)}`,
   );
-  const rootRef = "urn:mcp-inventory:secure-mpc";
+  const rootRef = "urn:mcp-inventory:mcp-trustmap";
 
   return {
     $schema: "https://cyclonedx.org/schema/bom-1.7.schema.json",
@@ -476,7 +476,7 @@ export function createCycloneDxReport(
         components: [
           {
             type: "application",
-            name: "Secure MPC",
+            name: "MCP TrustMap",
             version: "1.5.0",
           },
         ],
@@ -494,20 +494,20 @@ export function createCycloneDxReport(
         "bom-ref": serverRefs[index],
         name: server.name,
         properties: [
-          { name: "secure-mpc:transport", value: server.transport },
-          { name: "secure-mpc:source", value: server.source },
+          { name: "mcp-trustmap:transport", value: server.transport },
+          { name: "mcp-trustmap:source", value: server.source },
           ...(server.score === undefined
             ? []
             : [
                 {
-                  name: "secure-mpc:security-score",
+                  name: "mcp-trustmap:security-score",
                   value: String(server.score),
                 },
               ]),
           ...(server.findings
             ? [
                 {
-                  name: "secure-mpc:findings",
+                  name: "mcp-trustmap:findings",
                   value: String(server.findings.length),
                 },
               ]
@@ -522,25 +522,25 @@ export function createCycloneDxReport(
         ...(component.purl ? { purl: component.purl } : {}),
         properties: [
           {
-            name: "secure-mpc:ecosystem",
+            name: "mcp-trustmap:ecosystem",
             value: component.ecosystem,
           },
           {
-            name: "secure-mpc:pin-status",
+            name: "mcp-trustmap:pin-status",
             value: component.pinStatus,
           },
           {
-            name: "secure-mpc:evidence",
+            name: "mcp-trustmap:evidence",
             value: component.evidence,
           },
           {
-            name: "secure-mpc:scope",
+            name: "mcp-trustmap:scope",
             value: component.scope ?? "direct",
           },
           ...(component.lockfile
             ? [
                 {
-                  name: "secure-mpc:lockfile",
+                  name: "mcp-trustmap:lockfile",
                   value: component.lockfile,
                 },
               ]
@@ -548,7 +548,7 @@ export function createCycloneDxReport(
           ...(component.integrityStatus
             ? [
                 {
-                  name: "secure-mpc:integrity",
+                  name: "mcp-trustmap:integrity",
                   value: component.integrityStatus,
                 },
               ]
@@ -556,7 +556,7 @@ export function createCycloneDxReport(
           ...(component.workspace
             ? [
                 {
-                  name: "secure-mpc:workspace",
+                  name: "mcp-trustmap:workspace",
                   value: component.workspace,
                 },
               ]
@@ -564,29 +564,29 @@ export function createCycloneDxReport(
           ...(component.provenance
             ? [
                 {
-                  name: "secure-mpc:provenance-provider",
+                  name: "mcp-trustmap:provenance-provider",
                   value: component.provenance.provider,
                 },
                 {
-                  name: "secure-mpc:registry-signature",
+                  name: "mcp-trustmap:registry-signature",
                   value: component.provenance.registrySignature,
                 },
                 {
-                  name: "secure-mpc:slsa-provenance",
+                  name: "mcp-trustmap:slsa-provenance",
                   value: component.provenance.slsaProvenance,
                 },
                 {
-                  name: "secure-mpc:provenance-subject-digest",
+                  name: "mcp-trustmap:provenance-subject-digest",
                   value: component.provenance.subjectDigest,
                 },
                 {
-                  name: "secure-mpc:provenance-identity-policy",
+                  name: "mcp-trustmap:provenance-identity-policy",
                   value: component.provenance.identityPolicy,
                 },
                 ...(component.provenance.policyId
                   ? [
                       {
-                        name: "secure-mpc:provenance-policy",
+                        name: "mcp-trustmap:provenance-policy",
                         value: component.provenance.policyId,
                       },
                     ]
@@ -594,7 +594,7 @@ export function createCycloneDxReport(
                 ...(component.provenance.sourceRepository
                   ? [
                       {
-                        name: "secure-mpc:source-repository",
+                        name: "mcp-trustmap:source-repository",
                         value: component.provenance.sourceRepository,
                       },
                     ]
@@ -602,7 +602,7 @@ export function createCycloneDxReport(
                 ...(component.provenance.builderId
                   ? [
                       {
-                        name: "secure-mpc:builder-id",
+                        name: "mcp-trustmap:builder-id",
                         value: component.provenance.builderId,
                       },
                     ]
diff --git a/lib/trustmap-modules.ts b/lib/trustmap-modules.ts
new file mode 100644
index 0000000..1a70615
--- /dev/null
+++ b/lib/trustmap-modules.ts
@@ -0,0 +1,284 @@
+import type { McpServer, Severity } from "./audit-engine.ts";
+import {
+  openFindingEntries,
+  riskExceptionStatus,
+  type RiskException,
+} from "./finding-exceptions.ts";
+
+export type TrustMapCiOptions = {
+  configPath: string;
+  failOn: Severity;
+  sarif: boolean;
+  sbom: boolean;
+  osv: boolean;
+  provenance: boolean;
+  requireServers: boolean;
+};
+
+export type DistributionItem = {
+  label: string;
+  count: number;
+  percentage: number;
+};
+
+export type DiscoverSummary = {
+  servers: number;
+  sources: DistributionItem[];
+  transports: DistributionItem[];
+  components: number;
+  pinnedComponents: number;
+  provenanceVerified: number;
+};
+
+export type CiGatePreview = {
+  passed: boolean;
+  blockingFindings: number;
+  threshold: Severity;
+  label: string;
+};
+
+export type EnterpriseOwnerSummary = {
+  owner: string;
+  servers: number;
+  averageScore: number;
+  openCritical: number;
+};
+
+export type EnterpriseSummary = {
+  servers: number;
+  owners: EnterpriseOwnerSummary[];
+  ownershipCoverage: number;
+  provenanceCoverage: number;
+  openCritical: number;
+  activeExceptions: number;
+  expiringExceptions: number;
+  readinessScore: number;
+};
+
+const severityRank: Record<Severity, number> = {
+  critical: 3,
+  high: 2,
+  medium: 1,
+};
+
+function distribution(values: string[]): DistributionItem[] {
+  const counts = new Map<string, number>();
+  for (const value of values) {
+    const label = value.trim() || "Non renseigné";
+    counts.set(label, (counts.get(label) ?? 0) + 1);
+  }
+  return [...counts.entries()]
+    .map(([label, count]) => ({
+      label,
+      count,
+      percentage: values.length ? Math.round((count / values.length) * 100) : 0,
+    }))
+    .sort((left, right) => right.count - left.count || left.label.localeCompare(right.label));
+}
+
+export function createDiscoverSummary(servers: McpServer[]): DiscoverSummary {
+  const components = servers.flatMap((server) => server.components ?? []);
+  return {
+    servers: servers.length,
+    sources: distribution(servers.map((server) => server.source)),
+    transports: distribution(servers.map((server) => server.transport)),
+    components: components.length,
+    pinnedComponents: components.filter((component) => component.pinStatus === "pinned")
+      .length,
+    provenanceVerified: components.filter(
+      (component) =>
+        component.provenance?.registrySignature === "verified" ||
+        component.provenance?.slsaProvenance === "verified",
+    ).length,
+  };
+}
+
+function shellArgument(value: string): string {
+  const trimmed = value.trim();
+  if (/^[A-Za-z0-9_./@:-]+$/.test(trimmed)) return trimmed;
+  return `"${trimmed.replaceAll("\\", "\\\\").replaceAll('"', '\\"')}"`;
+}
+
+export function createCiCommand(options: TrustMapCiOptions): string {
+  const args = [
+    "npm run collect --",
+    "--no-default-paths",
+    `--path ${shellArgument(options.configPath || "./.mcp.json")}`,
+    `--fail-on ${options.failOn}`,
+  ];
+  if (options.requireServers) args.push("--require-servers");
+  if (options.osv) args.push("--osv");
+  if (options.provenance) args.push("--provenance");
+  if (options.sbom) args.push("--sbom ./mcp-trustmap.cdx.json");
+  if (options.sarif) args.push("--sarif ./mcp-trustmap.sarif");
+  return args.join(" ");
+}
+
+export function createGithubActionsWorkflow(options: TrustMapCiOptions): string {
+  const auditCommand = createCiCommand(options);
+  const sarifSteps = options.sarif
+    ? `
+      - name: Publier les constats SARIF
+        if: always() && hashFiles('mcp-trustmap.sarif') != ''
+        uses: github/codeql-action/upload-sarif@v4
+        with:
+          sarif_file: mcp-trustmap.sarif`
+    : "";
+  const securityPermission = options.sarif
+    ? "\n  security-events: write"
+    : "";
+
+  return `name: MCP TrustMap
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+
+permissions:
+  contents: read${securityPermission}
+
+jobs:
+  trustmap:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
+        with:
+          node-version: 22.13
+          cache: npm
+      - run: npm ci
+      - name: Appliquer la politique MCP TrustMap
+        run: ${auditCommand}${sarifSteps}
+`;
+}
+
+export function evaluateCiGate(
+  servers: McpServer[],
+  exceptions: RiskException[],
+  threshold: Severity,
+): CiGatePreview {
+  const blockingFindings = openFindingEntries(servers, exceptions).filter(
+    ({ finding }) => severityRank[finding.severity] >= severityRank[threshold],
+  ).length;
+  return {
+    passed: blockingFindings === 0,
+    blockingFindings,
+    threshold,
+    label:
+      blockingFindings === 0
+        ? "La politique réussirait sur l’inventaire actuel."
+        : `${blockingFindings} écart${blockingFindings > 1 ? "s" : ""} bloquerai${blockingFindings > 1 ? "ent" : "t"} la livraison.`,
+  };
+}
+
+export function createEnterpriseSummary(
+  servers: McpServer[],
+  exceptions: RiskException[],
+  now = new Date(),
+): EnterpriseSummary {
+  const owners = new Map<string, McpServer[]>();
+  for (const server of servers) {
+    const owner = server.owner.trim() || "Non attribué";
+    owners.set(owner, [...(owners.get(owner) ?? []), server]);
+  }
+
+  const openEntries = openFindingEntries(servers, exceptions, now);
+  const ownerSummaries = [...owners.entries()]
+    .map(([owner, ownerServers]) => ({
+      owner,
+      servers: ownerServers.length,
+      averageScore: Math.round(
+        ownerServers.reduce((sum, server) => sum + server.score, 0) /
+          ownerServers.length,
+      ),
+      openCritical: openEntries.filter(
+        ({ server, finding }) =>
+          (server.owner.trim() || "Non attribué") === owner &&
+          finding.severity === "critical",
+      ).length,
+    }))
+    .sort(
+      (left, right) =>
+        right.openCritical - left.openCritical ||
+        left.averageScore - right.averageScore ||
+        left.owner.localeCompare(right.owner),
+    );
+
+  const assigned = servers.filter(
+    (server) => server.owner.trim() && server.owner !== "Non attribué",
+  ).length;
+  const components = servers.flatMap((server) => server.components ?? []);
+  const verified = components.filter(
+    (component) =>
+      component.provenance?.registrySignature === "verified" ||
+      component.provenance?.slsaProvenance === "verified",
+  ).length;
+  const active = exceptions.filter(
+    (exception) => riskExceptionStatus(exception, now) === "active",
+  );
+  const thirtyDays = 30 * 24 * 60 * 60 * 1_000;
+  const ownershipCoverage = servers
+    ? Math.round((assigned / servers.length) * 100)
+    : 0;
+  const provenanceCoverage = components
+    ? Math.round((verified / components.length) * 100)
+    : 0;
+  const openCritical = openEntries.filter(
+    ({ finding }) => finding.severity === "critical",
+  ).length;
+  const readinessScore = Math.round(
+    ownershipCoverage * 0.35 +
+      provenanceCoverage * 0.25 +
+      (openCritical === 0 ? 25 : Math.max(0, 25 - openCritical * 5)) +
+      (servers.length ? 15 : 0),
+  );
+
+  return {
+    servers: servers.length,
+    owners: ownerSummaries,
+    ownershipCoverage,
+    provenanceCoverage,
+    openCritical,
+    activeExceptions: active.length,
+    expiringExceptions: active.filter(
+      (exception) =>
+        Date.parse(exception.expiresAt) - now.getTime() <= thirtyDays,
+    ).length,
+    readinessScore,
+  };
+}
+
+export function createEnterprisePolicyPack(
+  servers: McpServer[],
+  exceptions: RiskException[],
+  generatedAt = new Date(),
+) {
+  const summary = createEnterpriseSummary(servers, exceptions, generatedAt);
+  return {
+    schemaVersion: "1.0",
+    generatedAt: generatedAt.toISOString(),
+    generator: { name: "MCP TrustMap", module: "TrustMap Enterprise" },
+    policy: {
+      minimumOwnershipCoverage: 100,
+      minimumProvenanceCoverage: 80,
+      maximumOpenCritical: 0,
+      maximumExceptionDays: 30,
+    },
+    summary,
+    owners: summary.owners,
+    activeExceptions: exceptions
+      .filter(
+        (exception) =>
+          riskExceptionStatus(exception, generatedAt) === "active",
+      )
+      .map((exception) => ({
+        id: exception.id,
+        owner: exception.owner,
+        serverId: exception.serverId,
+        rule: exception.rule,
+        expiresAt: exception.expiresAt,
+        reason: exception.reason,
+      })),
+  };
+}
diff --git a/package-lock.json b/package-lock.json
index be8476b..5fa764d 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,11 +1,11 @@
 {
-  "name": "secure-mpc",
+  "name": "mcp-trustmap",
   "version": "0.1.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
-      "name": "secure-mpc",
+      "name": "mcp-trustmap",
       "version": "0.1.0",
       "dependencies": {
         "drizzle-orm": "0.45.2",
diff --git a/package.json b/package.json
index a75111b..da8251f 100644
--- a/package.json
+++ b/package.json
@@ -1,5 +1,5 @@
 {
-  "name": "secure-mpc",
+  "name": "mcp-trustmap",
   "version": "0.1.0",
   "private": true,
   "engines": {
@@ -16,7 +16,7 @@
     "collect:security": "node --experimental-strip-types tools/collector.ts --probe --osv --provenance --sbom",
     "validate:admission": "node --experimental-strip-types tools/validate-admission.ts",
     "test": "npm run build && npm run test:unit && npm run test:rendered",
-    "test:unit": "node --experimental-strip-types --test tests/audit-engine.test.ts tests/audit-history.test.ts tests/ci-gate.test.ts tests/collector.test.ts tests/finding-exceptions.test.ts tests/kubernetes-admission.test.ts tests/kubernetes-admission-validation.test.ts tests/lockfiles.test.ts tests/oci-provenance.test.ts tests/osv.test.ts tests/pdf-report.test.ts tests/provenance.test.ts tests/supply-chain.test.ts tests/workspaces.test.ts",
+    "test:unit": "node --experimental-strip-types --test tests/audit-engine.test.ts tests/audit-history.test.ts tests/ci-gate.test.ts tests/collector.test.ts tests/finding-exceptions.test.ts tests/kubernetes-admission.test.ts tests/kubernetes-admission-validation.test.ts tests/lockfiles.test.ts tests/oci-provenance.test.ts tests/osv.test.ts tests/pdf-report.test.ts tests/provenance.test.ts tests/supply-chain.test.ts tests/trustmap-modules.test.ts tests/workspaces.test.ts",
     "test:rendered": "node --test tests/rendered-html.test.mjs",
     "lint": "eslint . --ignore-pattern dist --ignore-pattern .next --ignore-pattern .vite",
     "db:generate": "drizzle-kit generate"
diff --git a/public/og.png b/public/og.png
index 2bbd6db..6519ce3 100644
Binary files a/public/og.png and b/public/og.png differ
diff --git a/tests/audit-engine.test.ts b/tests/audit-engine.test.ts
index b0b987f..6c34442 100644
--- a/tests/audit-engine.test.ts
+++ b/tests/audit-engine.test.ts
@@ -247,7 +247,7 @@ test("imports a redacted collector inventory with passive probe evidence", () =>
       schemaVersion: "1.0",
       generatedAt: "2026-07-29T12:00:00.000Z",
       collector: {
-        name: "Secure MPC Collector",
+        name: "MCP TrustMap Collector",
         version: "1.0.0",
         platform: "linux",
       },
@@ -302,7 +302,7 @@ test("turns OSV advisories into scored findings and SARIF rules", () => {
       schemaVersion: "1.0",
       generatedAt: "2026-07-29T12:00:00.000Z",
       collector: {
-        name: "Secure MPC Collector",
+        name: "MCP TrustMap Collector",
         version: "1.2.0",
         platform: "linux",
       },
@@ -421,7 +421,7 @@ test("turns invalid SLSA or registry proofs into a critical finding", () => {
       schemaVersion: "1.0",
       generatedAt: "2026-07-30T12:00:00.000Z",
       collector: {
-        name: "Secure MPC Collector",
+        name: "MCP TrustMap Collector",
         version: "1.5.0",
         platform: "linux",
       },
@@ -505,7 +505,7 @@ test("imports a verified GitHub OCI attestation without inventing a supply-chain
       schemaVersion: "1.0",
       generatedAt: "2026-07-30T12:00:00.000Z",
       collector: {
-        name: "Secure MPC Collector",
+        name: "MCP TrustMap Collector",
         version: "1.4.0",
         platform: "linux",
       },
@@ -594,7 +594,7 @@ test("turns an unmatched OCI policy into a critical actionable finding", () => {
       schemaVersion: "1.0",
       generatedAt: "2026-07-30T12:00:00.000Z",
       collector: {
-        name: "Secure MPC Collector",
+        name: "MCP TrustMap Collector",
         version: "1.5.0",
         platform: "linux",
       },
diff --git a/tests/ci-gate.test.ts b/tests/ci-gate.test.ts
index be845ae..02d1d48 100644
--- a/tests/ci-gate.test.ts
+++ b/tests/ci-gate.test.ts
@@ -106,7 +106,7 @@ test("summary excludes configuration snippets and concrete secrets", () => {
 });
 
 test("collector CLI writes SARIF and returns code 3 for a blocked audit", async () => {
-  const directory = await mkdtemp(join(tmpdir(), "secure-mpc-gate-"));
+  const directory = await mkdtemp(join(tmpdir(), "mcp-trustmap-gate-"));
   const configuration = join(directory, "unsafe.json");
   const inventory = join(directory, "inventory.json");
   const sarif = join(directory, "results.sarif");
diff --git a/tests/collector.test.ts b/tests/collector.test.ts
index 55398c6..841c500 100644
--- a/tests/collector.test.ts
+++ b/tests/collector.test.ts
@@ -148,7 +148,7 @@ test("redacts concrete credentials but preserves environment placeholders", () =
 });
 
 test("collects supported containers without retaining source secrets", async () => {
-  const directory = await mkdtemp(join(tmpdir(), "secure-mpc-"));
+  const directory = await mkdtemp(join(tmpdir(), "mcp-trustmap-"));
   const configPath = join(directory, "mcp.json");
   const secret = "source-secret-that-must-not-leak";
 
@@ -205,7 +205,7 @@ test("collects supported containers without retaining source secrets", async ()
 });
 
 test("collects Codex TOML servers and redacts nested secrets", async () => {
-  const directory = await mkdtemp(join(tmpdir(), "secure-mpc-codex-"));
+  const directory = await mkdtemp(join(tmpdir(), "mcp-trustmap-codex-"));
   const configPath = join(directory, "config.toml");
   const secret = "codex-secret-that-must-not-leak";
 
@@ -261,7 +261,7 @@ test("collects Codex TOML servers and redacts nested secrets", async () => {
 });
 
 test("collects Claude Code user and local project scopes", async () => {
-  const directory = await mkdtemp(join(tmpdir(), "secure-mpc-claude-"));
+  const directory = await mkdtemp(join(tmpdir(), "mcp-trustmap-claude-"));
   const configPath = join(directory, ".claude.json");
   const secret = "claude-secret-that-must-not-leak";
 
@@ -336,7 +336,7 @@ test("collects Claude Code user and local project scopes", async () => {
 });
 
 test("accepts a Claude Code state file without configured MCP servers", async () => {
-  const directory = await mkdtemp(join(tmpdir(), "secure-mpc-claude-empty-"));
+  const directory = await mkdtemp(join(tmpdir(), "mcp-trustmap-claude-empty-"));
   const configPath = join(directory, ".claude.json");
 
   try {
@@ -371,7 +371,7 @@ test("accepts a Claude Code state file without configured MCP servers", async ()
 });
 
 test("reports invalid TOML sources without exposing their contents", async () => {
-  const directory = await mkdtemp(join(tmpdir(), "secure-mpc-toml-"));
+  const directory = await mkdtemp(join(tmpdir(), "mcp-trustmap-toml-"));
   const configPath = join(directory, "config.toml");
   const secret = "invalid-toml-content-must-not-leak";
 
@@ -398,7 +398,7 @@ test("reports invalid TOML sources without exposing their contents", async () =>
 });
 
 test("attaches workspace lockfile dependencies to matching MCP servers", async () => {
-  const directory = await mkdtemp(join(tmpdir(), "secure-mpc-lock-"));
+  const directory = await mkdtemp(join(tmpdir(), "mcp-trustmap-lock-"));
   const configPath = join(directory, "mcp.json");
   try {
     await writeFile(
diff --git a/tests/pdf-report.test.ts b/tests/pdf-report.test.ts
index 091a267..fdc2ab0 100644
--- a/tests/pdf-report.test.ts
+++ b/tests/pdf-report.test.ts
@@ -60,7 +60,7 @@ test("creates a paginated PDF audit with actionable and accepted risks", () => {
   assert.match(suffix, /%%EOF/);
   assert.ok(report.bytes.length > 8_000);
   assert.ok(report.pages >= 2);
-  assert.equal(report.fileName, "secure-mpc-audit-2026-07-30.pdf");
+  assert.equal(report.fileName, "mcp-trustmap-audit-2026-07-30.pdf");
   assert.deepEqual(report.summary, {
     servers: 1,
     score: 34,
diff --git a/tests/rendered-html.test.mjs b/tests/rendered-html.test.mjs
index dd59139..218166d 100644
--- a/tests/rendered-html.test.mjs
+++ b/tests/rendered-html.test.mjs
@@ -39,15 +39,18 @@ async function render() {
   }
 }
 
-test("server-renders the Secure MPC application", async () => {
+test("server-renders the MCP TrustMap application", async () => {
   const response = await render();
   assert.equal(response.status, 200);
   assert.match(response.headers.get("content-type") ?? "", /^text\/html\b/i);
 
   const html = await response.text();
   assert.match(html, /<html lang="fr">/i);
-  assert.match(html, /<title>Secure MPC — Audit de sécurité MCP<\/title>/i);
-  assert.match(html, /Secure MPC/);
+  assert.match(
+    html,
+    /<title>MCP TrustMap — Cartographie, audit et gouvernance MCP<\/title>/i,
+  );
+  assert.match(html, /MCP TrustMap/);
   assert.match(html, /Vue d’ensemble/);
   assert.match(html, /Lancer un audit/);
   assert.match(html, /Exporter/);
@@ -222,7 +225,10 @@ test("keeps the audit engine separate from the interface", async () => {
   assert.match(ciWorkflow, /npm run validate:admission/);
   assert.match(ciWorkflow, /npm audit --omit=dev --audit-level=high/);
   assert.match(ciWorkflow, /npm run audit:ci/);
-  assert.match(layout, /Secure MPC — Audit de sécurité MCP/);
+  assert.match(
+    layout,
+    /MCP TrustMap — Cartographie, audit et gouvernance MCP/,
+  );
   assert.doesNotMatch(packageJson, /react-loading-skeleton/);
   let previewFiles = [];
   try {
diff --git a/tests/supply-chain.test.ts b/tests/supply-chain.test.ts
index 7fcaad9..160846a 100644
--- a/tests/supply-chain.test.ts
+++ b/tests/supply-chain.test.ts
@@ -161,7 +161,7 @@ test("generates a deduplicated CycloneDX 1.7 dependency graph", () => {
   assert.equal(report.vulnerabilities?.[0].affects.length, 1);
   assert.match(
     JSON.stringify(report),
-    /secure-mpc:provenance-policy/,
+    /mcp-trustmap:provenance-policy/,
   );
   assert.match(
     report.vulnerabilities?.[0].recommendation ?? "",
diff --git a/tests/trustmap-modules.test.ts b/tests/trustmap-modules.test.ts
new file mode 100644
index 0000000..ec9fcff
--- /dev/null
+++ b/tests/trustmap-modules.test.ts
@@ -0,0 +1,148 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+import type { McpServer } from "../lib/audit-engine.ts";
+import type { RiskException } from "../lib/finding-exceptions.ts";
+import {
+  createCiCommand,
+  createDiscoverSummary,
+  createEnterprisePolicyPack,
+  createEnterpriseSummary,
+  createGithubActionsWorkflow,
+  evaluateCiGate,
+  type TrustMapCiOptions,
+} from "../lib/trustmap-modules.ts";
+
+const servers: McpServer[] = [
+  {
+    id: "alpha",
+    name: "Alpha MCP",
+    owner: "Platform",
+    transport: "Stdio",
+    source: "Claude Desktop",
+    score: 50,
+    status: "critical",
+    controls: 4,
+    lastScan: "maintenant",
+    findings: [
+      {
+        id: "alpha-secret",
+        severity: "critical",
+        title: "Secret exposé",
+        description: "Un secret est présent.",
+        remediation: "Utiliser un coffre.",
+        snippet: "${TOKEN}",
+        rule: "MCP-SEC-01",
+      },
+    ],
+    components: [
+      {
+        id: "npm:alpha@1.0.0",
+        ecosystem: "npm",
+        name: "alpha",
+        version: "1.0.0",
+        reference: "alpha@1.0.0",
+        componentType: "library",
+        pinStatus: "pinned",
+        evidence: "package-lock.json",
+        provenance: {
+          provider: "npm-registry-sigstore",
+          checkedAt: "2026-07-30T10:00:00.000Z",
+          registrySignature: "verified",
+          slsaProvenance: "verified",
+          subjectDigest: "matched",
+          identityPolicy: "matched",
+          message: "Preuves valides.",
+        },
+      },
+    ],
+  },
+  {
+    id: "beta",
+    name: "Beta MCP",
+    owner: "Produit",
+    transport: "HTTPS",
+    source: "VS Code",
+    score: 90,
+    status: "secure",
+    controls: 4,
+    lastScan: "maintenant",
+    findings: [],
+  },
+];
+
+const ciOptions: TrustMapCiOptions = {
+  configPath: "./configs/MCP production.json",
+  failOn: "high",
+  sarif: true,
+  sbom: true,
+  osv: true,
+  provenance: true,
+  requireServers: true,
+};
+
+test("TrustMap CI génère une commande déterministe et sûre", () => {
+  const command = createCiCommand(ciOptions);
+  assert.match(command, /--path "\.\/configs\/MCP production\.json"/);
+  assert.match(command, /--fail-on high/);
+  assert.match(command, /--require-servers/);
+  assert.match(command, /--osv/);
+  assert.match(command, /--provenance/);
+  assert.match(command, /mcp-trustmap\.cdx\.json/);
+  assert.match(command, /mcp-trustmap\.sarif/);
+});
+
+test("TrustMap CI produit un workflow GitHub Actions avec SARIF", () => {
+  const workflow = createGithubActionsWorkflow(ciOptions);
+  assert.match(workflow, /name: MCP TrustMap/);
+  assert.match(workflow, /security-events: write/);
+  assert.match(workflow, /github\/codeql-action\/upload-sarif@v4/);
+  assert.match(workflow, /npm run collect/);
+});
+
+test("TrustMap CI simule les constats ouverts et les exceptions actives", () => {
+  const blocked = evaluateCiGate(servers, [], "high");
+  assert.equal(blocked.passed, false);
+  assert.equal(blocked.blockingFindings, 1);
+
+  const exception: RiskException = {
+    schemaVersion: "1.0",
+    id: "exception-alpha",
+    serverId: "alpha",
+    serverName: "Alpha MCP",
+    findingId: "alpha-secret",
+    rule: "MCP-SEC-01",
+    findingTitle: "Secret exposé",
+    reason: "Migration du coffre planifiée.",
+    owner: "Platform",
+    createdAt: "2026-07-30T10:00:00.000Z",
+    expiresAt: "2099-08-30T10:00:00.000Z",
+  };
+  assert.equal(evaluateCiGate(servers, [exception], "high").passed, true);
+});
+
+test("TrustMap Discover agrège les sources, transports et preuves", () => {
+  const summary = createDiscoverSummary(servers);
+  assert.equal(summary.servers, 2);
+  assert.equal(summary.sources.length, 2);
+  assert.equal(summary.transports.length, 2);
+  assert.equal(summary.components, 1);
+  assert.equal(summary.pinnedComponents, 1);
+  assert.equal(summary.provenanceVerified, 1);
+});
+
+test("TrustMap Enterprise calcule la gouvernance et exporte un pack minimal", () => {
+  const now = new Date("2026-07-30T12:00:00.000Z");
+  const summary = createEnterpriseSummary(servers, [], now);
+  assert.equal(summary.ownershipCoverage, 100);
+  assert.equal(summary.provenanceCoverage, 100);
+  assert.equal(summary.openCritical, 1);
+  assert.deepEqual(
+    summary.owners.map((owner) => owner.owner),
+    ["Platform", "Produit"],
+  );
+
+  const pack = createEnterprisePolicyPack(servers, [], now);
+  assert.equal(pack.generator.name, "MCP TrustMap");
+  assert.equal(pack.policy.maximumOpenCritical, 0);
+  assert.equal(pack.generatedAt, now.toISOString());
+});
diff --git a/tools/admission.ts b/tools/admission.ts
index f686b9a..e9dd8a8 100644
--- a/tools/admission.ts
+++ b/tools/admission.ts
@@ -18,7 +18,7 @@ type CliOptions = {
 };
 
 function help(): string {
-  return `Secure MPC — Générateur d’admission Kubernetes
+  return `MCP TrustMap — Générateur d’admission Kubernetes
 
 Usage:
   npm run generate:admission -- \\
diff --git a/tools/collector.ts b/tools/collector.ts
index 8d18845..a67a1d2 100644
--- a/tools/collector.ts
+++ b/tools/collector.ts
@@ -52,7 +52,7 @@ type CliOptions = {
 };
 
 function help(): string {
-  return `Secure MPC Collector
+  return `MCP TrustMap Collector
 
 Usage:
   npm run collect
@@ -87,7 +87,7 @@ Options:
   --oci-policy-file <fichier>
                          Applique plusieurs politiques OCI par préfixe d’image
   --sbom [fichier]       Produit aussi un SBOM CycloneDX 1.7
-  --sarif [fichier]      Produit un rapport SARIF (défaut : secure-mpc.sarif)
+  --sarif [fichier]      Produit un rapport SARIF (défaut : mcp-trustmap.sarif)
   --fail-on <niveau>     Échoue sur critical, high ou medium et niveaux supérieurs
   --require-servers      Échoue si aucun serveur MCP n’est découvert
   --timeout <ms>         Délai du probe, entre 500 et 15000 ms (défaut : 5000)
@@ -233,7 +233,7 @@ function parseArguments(args: string[]): CliOptions {
         options.sarifOutput = resolve(candidate);
         index += 1;
       } else {
-        options.sarifOutput = resolve("secure-mpc.sarif");
+        options.sarifOutput = resolve("mcp-trustmap.sarif");
       }
       continue;
     }
diff --git a/tools/validate-admission.ts b/tools/validate-admission.ts
index e21ce60..30291a9 100644
--- a/tools/validate-admission.ts
+++ b/tools/validate-admission.ts
@@ -12,7 +12,7 @@ type CliOptions = {
 };
 
 function help(): string {
-  return `Secure MPC — Validation de bundle d’admission Kubernetes
+  return `MCP TrustMap — Validation de bundle d’admission Kubernetes
 
 Usage:
   npm run validate:admission -- \\