Status: OUT
RHEL 9 integrates security into every lifecycle phase: provisioning (Image Builder/Kickstart produce systems with hardened defaults), day-2 operations (DNF security updates, advisory-driven patching, audit/AIDE/OpenSCAP compliance verification), and upgrade paths (Leapp/bootc preserve security posture) — all governed by defense-in-depth controls, identity-based access, and system-wide crypto policies.