Controls represented in the code
Domain verification before project crawling Central project permission checks Server-side payment capture confirmation Token encryption in the workspace module Job claiming and retry handling
These are source-level features, not an independent security certification.
