# Security Policy
- All transition proposals must be signed (HMMM keypair). 
- Secrets via AGE-encrypted configs. 
- License gating enforced before any network ops.
- Report issues via private security channel.