Detailed security architecture: encryption at rest and in transit, RLS, key management, intrusion detection, and operational controls.