"""
security — Default-deny posture and container mode enforcement.

Provides:
- Container mode detection and lockdown application
- Permission gate for per-listener tool access
- Network egress policy enforcement
- Security event logging
"""

from xml_pipeline.security.defaults import (
    apply_container_defaults,
    get_organism_mode,
    is_container_mode,
)

__all__ = [
    "apply_container_defaults",
    "get_organism_mode",
    "is_container_mode",
]