Upgrade governance, key management, and access control architecture are set during design, and by the time a security review is underway, they are largely fixed. The post lays out the architecture decisions banks must get right before building onchain.