The record's rules are code. A gate stops any release that breaks them, and a person reads every security finding. Here is where the checks are strong, and where they are not.
A site that holds tips and sensitive details owes people care. How the record's rules are written as code and refused at publish time, what the 816 tests guard, where the checks are weaker, and what an AI security audit did and did not find.