Security

The security review (docx §9) — data-sensitivity map, roles/permissions, auth, authz boundaries (RLS + BOLA), external-API/data risks, AI/LLM risk, secrets handling, and legal escalation where required. Checklist-based, not a full automated audit.