Reviews broker configuration and the code that publishes and consumes events: authentication and authorization, transport encryption, payload trust, schema enforcement, replay and idempotency, dead-letter routing, retention, and the administrative surface. Returns an evidence-based verdict, a traffic map, findings, small fixes, and isolated checks that preserve normal flow.