Security
- Single PostgreSQL database (schemas: "SPCio", app, spcio_qc, erp_mirror).
- pgvector embeddings (1024-D) with HNSW; no external vector service.
- Confidentiality levels and export redaction for PPAP artifacts.
- Optional offline installer and air-gapped operation.