Security
The security posture, at a level suitable for reviewers.
What this will cover
- Authentication and session model.
- Role-based access control and tenant isolation.
- Transport security and API protections.
- How personal data is handled and where secrets live (locations, not values).