Privacy and security

All sources, recipes and outputs remain in memory; exports are explicit. No telemetry, remote references, eval or arbitrary expressions exist. Joins and every structural dimension are capped.