# Security Guide

Security review checks authentication, authorization, input validation, file uploads, API rate limiting, sensitive data, secrets, dependencies, database access, logging, errors, OWASP-style risks, and NIST SSDF-style process alignment.

Critical security findings block release. High findings block release unless an explicit accepted exception is documented.