Security at AlertChannels

Channel API keys, pairing tokens, installation tokens, and provider credentials are never stored as reusable plaintext secrets.

Organization, Channel, recipient, device, message, and delivery operations are scoped and authorized at the backend before data access.

Rate limits, idempotency, audit logs, retries, dead letters, token retirement, and security-event administration support reliable operations.