Governance & QC

• Eligibility criteria (UKB consent, imaging + genetics availability)
• Exclusion rules (withdrawn, major QC flags, incomplete covariates)
• Missingness tracking per table + imputation policy
• Harmonization notes for imaging, genetics, and covariates
• PII handling and secure storage (encrypted buckets, audit logging)
• Data security (role-based access, key rotation, least privilege)