Secure architecture for critical operations: threat model, trust boundaries, IAM, integrations, recovery, and observability.