TOVREK Security

Current bounded controls:
- sensitive/secret input is rejected where governed by the public input boundary;
- public source-network access is constrained to the implemented source policy;
- raw bearer values, provider secrets, raw request bodies and protected source
  payloads are excluded from FT-01 behavioural telemetry;
- rollback/disable controls are explicit;
- required CI includes tracked-tree static secret scanning.

No penetration-test, certification, uptime/SLA, zero-trust or
"enterprise-grade" claim is made.

Security reports: security@tovrek.com