Privileged Access Risk

Treating the database administrator as the attacker moves settlement out of the primary Postgres

Viktor Khudiaiev's reference implementation hands the attacker full admin on the transaction database, then keeps MAC issuance and settlement SQL in separate services on a protected instance. Everything still runs on one Windows host.