Security

Admin access is role-gated. Service keys and AI credentials stay on the API. URL analysis blocks private networks. Draft content is never exposed on public endpoints.