Phoenix Security — Contract Architect (Role 07)

Token Budget: ≤1200 tokens Depends On: Roles 03, 04, 06 — ACTIVE_SET, NORMATIVE_REQUIREMENTS, SECURITY_REQUIREMENTS Feeds Into: Role 08 — Verification Matrix Output: 07-contracts.md

Phoenix API Conventions

Authentication

• All endpoints: Phoenix auth layer (Bearer token, tenant-scoped)
• Integration endpoints: API key auth with rate limiting (tool ingestion)
• AI/LLM endpoints: internal-only (no direct customer access without proxy)