PRE-LAUNCH SECURITY CHECKLIST
=============================

1. Authentication uses a battle-tested service
2. Passwords hashed with bcrypt/scrypt/Argon2
3. Rate limiting on all auth endpoints
4. TLS 1.2+ enforced
5. Secrets in secret management service