Security

• No API keys in the client; server-side proxy for model calls.
• Key rotation & least privilege for secrets.
• FERPA-aware data practices for EDU pilots.