Privacy as differentiation: local processing, mandatory RLS, tamper-evident audit — and a calm quality view for leadership.