SECURITY-FRESHNESS-RAG-EMBEDDING-POSTURE (Security Docs)

Release digest

SECURITY-FRESHNESS-RAG-EMBEDDING-POSTURE (Security Docs) — Refreshed the security guide with the Gemini preview and RAG embedding location posture: generation may use the global Gemini endpoint, while Vertex-backed RAG embeddings stay pinned to RAG_EMBEDDING_LOCATION and legacy Vertex RAG corpus creation remains explicit opt-in.
Re-ran the pre-push suite and confirmed the only blocking signal was core documentation freshness for SECURITY.md; backend tests, coverage, dashboard lint/build, and AI runtime evals were green in the same sweep.
Documentation decision: updated SECURITY.md because the core documentation freshness gate required a current security posture review after the Gemini/RAG runtime split. Public docs decision: no public documentation change is required because this only clarifies internal security and deployment controls.