Validated CRUD ops, user authentication + RBAC, maximum header security, Rust API runtime, TanStack, and more.