Critical and high-priority security fixes required before broader rollout
Follow-up architecture and production-hardening work after immediate security remediation