fedRampDefaults

FedRAMP-compliant defaults (NIST 800-53).

Enables all security features: validation (strict), PII detection (reject), field encryption, anomaly detection, signed audit, and 365-day audit retention.

Transport security: logs an ERROR if baseUrl is HTTPS without TransportSecurityPolicy.certificatePins or TransportSecurityPolicy.certificateTransparencyEnabled; see warnIfHttpsWithoutTransportSecurity. The returned config still uses defaults; set transport security on the returned object via .copy(transportSecurityPolicy = ...).