Mining security

• Generate the payout key offline or in a wallet you control.
• Never embed private keys in scripts, systemd units, or git.
• Keep RPC loopback-only.
• Treat orphan risk as part of PoW, not as a support defect.