Security

• Secrets stay in a vault. This local build uses a demo store.
• Commissioner identity is never published.
• Sandbox isolation and SOC 2 posture apply when we run reproductions. Talk to us.
• arXiv via OAI-PMH / RSS / S3 bulk only. We do not scrape.