Harden security, sync, and query subsystems
Audit remediation: observability, documentation
Initial commit