Pass the security audit with secrets management, prompt injection defense, and audit trails — then architect for cost optimization without a rewrite.