Zero-Trust client-side security layer for UID.one. Enforces DLP, session binding, and SSD anti-tracking.