Transparency

All donations verified server-side. No browser-only confirmation. Audit logs kept. Backups tested.

• Rate limiting on OTP
• 401/403 on direct API without session
• Session revocation on logout
• Database isolation
• Secrets in env vars, not Git