security_review/audit/topics/daemon_exposure.md

# SpaceCash Security Review Topic: daemon_exposure

- Severity if failed: `high`
- Status: `not_reviewed`
- Reviewer:
- Reviewed at:

## Required Questions

- [ ] Which routes require auth before public deployment?
- [ ] What rate limits, CORS policy, TLS, and monitoring are required?

## Expected Controls

- production deployment runbook
- external hardening review

## Evidence Collected

- Source files reviewed:
- Commands/tests run:
- Artifacts reviewed:

## Findings

- None recorded yet.

## Closure Notes

- Decision: `not_reviewed`
- Notes: