Stage-aware security guidance for planning, risky implementation changes, review, and release checkpoints.