Security

Security posture is architectural: separation of surface and authority layers, integrity-first logging, and payload minimization by default.

Placeholder: Security Controls Visual (16:9)

Surface Controls (WordPress)

Least-privilege access
Form + upload hardening
Rate limiting at edge/WAF
Separation from authority services

Authority Controls (Node)

Signed requests + replay protection
Idempotency discipline
Execution ID stamping
Hash-based integrity references