SECURITY

Category: 01. AI / ML Hackathons
Section: Phase 3: Execution & Quality

Act as a security engineer.
Using the System Architecture and API Specification below, create a Security document for this AI hackathon project.

ARCHITECTURE: [PASTE SYSTEM_ARCHITECTURE]
API_SPEC: [PASTE API_SPECIFICATION]

Provide:
1. API key protection (Environment variables, backend-only access)
2. Authentication security (JWT, session management)
3. Input sanitization (Preventing prompt injection and XSS)
4. Data privacy (Ensuring user data is not leaked to the AI model)
5. Database security (Row-level security, permissions)
6. CORS configuration
7. Rate limiting (Preventing abuse of AI endpoints)
8. A pre-submission security checklist

Keep the security measures practical and easy to implement within a hackathon timeframe.

---