Security Posture

Default-deny, no private route inventory, redacted telemetry, and no backend overlay.