replay attack surfaces

Security review note covering attack surface, current mitigations, remaining risks, and future hardening requirements for deterministic runtime operations.