// SECURITY

Security by design

Controls are designed to keep migration analysis inspectable, scoped and reviewable.

01 / Least privilege

Connector access should use dedicated identities with the minimum metadata and sample-read permissions needed for analysis.

02 / Data minimisation

Workflows are metadata-first. Representative samples should be masked or synthetic wherever practical.

03 / Auditability

Mappings, rule pipelines, validation results and error policies are captured in portable specifications for independent review.

04 / Deployment

Encryption, network isolation, identity, retention and regional hosting controls are determined by the selected production deployment.

05 / Data in transit

Traffic to this prototype is served over HTTPS. Production deployments will document encryption at rest, network isolation and additional controls per environment.

06 / Reporting

A production security contact and vulnerability disclosure channel will be published before general availability.