Security

Deny-by-default policies, signed entitlements, admin audit, rate-limited local API tokens.

Self-hosted databases and admin studios must stay off the public internet.