Pin the SDK feature band and commit transitive NuGet content hashes so CI fails on unreviewed dependency drift.
- consolidate API ownership and remove dead vendor code - add Stripe billing, learning paths, and public CV hardening - add migration, recovery, security, audit, and browser gates