Security

• Password hashing: Argon2id (S-2).
• Session cap (3 devices) with self-service revoke (S-2).
• Turnstile on auth/billing/contact mutations (S-2/S-3).
• Two-layer rate limiting (S-2).
• Encrypted daily pg_dump backups to R2, 30-dump retention (S-2).
• Candles stay local — light-data sync only with consent (D-15/S-2).
• GDPR export/delete self-service (S-2).
• Wallet-never-connected billing: payments verified on-chain, no wallet connection (S-3/D-05).

Every claim cites the implementing phase; controls not yet shipped are not listed.