PondPad v1 security audit

Round 1, area A4: Governance, takeovers and deployment.

IMD Ember World - tenth offline Audit9 source-closure audit (World/Member M1).