CitizenIQ, entry 009

On 11 July I came back for a security pass, this time working with Codex on a separate branch: tighter permissions, billing checks against the exact product and price, rate limiting, and a written rollout checklist. On 12 July I added a shutdown switch on that branch that closes the site behind a closed page, with a note that reopening needs a full review of the app, database, payments and deployment first. That branch has not been merged into main.