14.11 Security Architecture

Timing-safe HMAC authentication, cryptographic audit chain, and flight-surgeon role-based redaction.