Security
Security posture and boundaries for NihaoInterview.
Application boundary
Server-side authorization, entitlement checks, request limits, secure headers, and audit logging protect sensitive operations.
Providers
Secrets belong in managed secret storage. No real credential is committed to this repository or exposed to the browser.
Responsible reporting
A production security contact must be configured before public launch.