Runtime Trust Boundaries

This diagram shows the production services, external systems, secrets, and browser trust boundaries. The browser never receives backend admin secrets or the Alpha API key.