Session Security
Server sessions use hashed tokens and cookie controls with TTL-based expiration.
Security and Platform Controls
The platform includes practical safeguards around sessions, billing webhooks, and access entitlements for module execution.
Plan and Entitlement Guardrails
Server routes enforce module-level access and usage quota checks before execution.
Operational Mode Isolation
You can separate development behavior with memory persistence and mock billing mode.
Stripe Webhook Verification
Stripe webhooks support signature verification using STRIPE_WEBHOOK_SECRET.