Prevent N+1 with DataLoader per request; batch and cache; show the batching

behavior with an example query and the resulting SQL count. 4. Pagination caps, pagination invariants, and complexity limits (depth + cost). 5. Persisted queries + allowlist for production; disable introspection in prod.