Security

Security is foundational: JWT auth with optional MFA, refresh-token rotation, strict tenant isolation, encrypted secrets, rate limiting, and a published vulnerability disclosure policy.