Data handling, OAuth scopes, and infrastructure posture will be documented here once the platform's real security controls (Setup Center, secret vault) exist — see master-prompt section 17.6.
Master-prompt section 4.1 / 19.7