I appreciate the concept here, but I have to ask: do you have a security page for this that documents the controls in place? I get that that's probably not a p

I appreciate the concept here, but I have to ask: do you have a security page for this that documents the controls in place? I get that that's probably not a priority for a startup, but the risk in someone relying on this for contract-work getting burned by someone exploiting your platform is pretty great (i.e potentially unbounded downside), especially if the detection/response processes don't catch or can't properly identify the adversary. I'm trying to account for the scenario where an adversary exploits a flaw that allows them to sign a contract on behalf of a client of the service at a time when audit trails aren't thorough enough for the client to repudiate a false signature.