Revision Sheet
Crypto and Keys
Web Crypto gives strong primitives, but real protection depends on key ownership, storage, rotation, and threat modeling.
Realtime and Files
Persistent transports and file lifecycles need authentication, authorization, schema validation, retry safety, storage rules, and safe output headers.
Isolation and Supply Chain
Browser isolation headers and dependency governance reduce attack surface when rolled out with inventory, testing, ownership, and rollback.