• Never commit cloud credentials, service-account JSON, API keys, identity-provider configuration, or private report exports.
• Keep document access closed by default and enforce authorization before retrieval.
• Treat uploaded text and retrieved graph properties as untrusted data; do not execute instructions found in them.
• Bound Cypher traversal depth, result count, and query time.
• Return citations that identify source documents and spans without exposing content outside the caller's authorization scope.
• Log request IDs and tool decisions without logging raw secrets or full private documents.

These controls describe how a rebuilt implementation should handle credentials, authorization, untrusted content, query limits, citations, and logs. They are not results from an independent penetration test of the private project.