Private by design
Authenticated HTML and private data are excluded from service-worker caching.
Tenant isolation
RLS policies and attack scripts exist; every new migration still requires staging execution proof.
Evidence integrity
Hash, quarantine, scan status and report evidence manifest controls are designed into trusted paths.