Map Terminal is designed as a local-first tool. The active product direction does not require private SSO.

The following must stay local and are ignored by git:

• .env
• .env.local
• backend/data/tokens.json
• generated data under backend/data/generated/
• downloaded SDE archives under backend/data/sde/

For now, security issues should be handled privately by the project owner before public disclosure.

Public ESI endpoints are used for sovereignty, campaigns, activity, universe system details, and performance checks. Any future private EVE SSO scope should be added deliberately and documented before it is enabled.