After COLDCARD, Trezor and SafePal: CLAVI's Case for Data Minimization
July and August 2026 exposed two different security failures: predictable wallet-secret generation and weak control of customer fulfillment data. The durable response is operator-inaccessible vault secrets plus purpose-specific minimum retention for unavoidable business records.