Paginating Phalcon ORM Queries: Offset vs. Keyset, and Where the Trust Boundaries Are
An architecture note on Phalcon ORM pagination: validate page/limit as untrusted input, use QueryBuilder with the Paginator for shallow data, and know when to switch to keyset cursors.