Systems Index is designed for local source discovery, but a catalog can still reveal sensitive architecture.

• Keep absolute roots and personal inventories in data/systems.local.json.
• Never index credentials, .env files, customer data, private URLs, or secret-bearing configuration.
• Public builds use only the tracked catalog and reject common home-directory paths and generated local fields.
• Source APIs return registered metadata, not file contents, and accept IDs rather than arbitrary paths.
• Source preparation resolves real paths and rejects files that escape the registered project root, including symlink escapes.

If you find a traversal, private-path exposure, or unsafe generation issue, open a private security report with the repository owner instead of including sensitive reproduction data in a public issue.