future federation risks

Security review note covering attack surface, current mitigations, remaining risks, and future hardening requirements for deterministic runtime operations.