# Security

## Initial Push

No external credentials are required.

## Future Requirements

- Validate artifact URIs before loading graph data
- Restrict admin analysis endpoints to internal callers
- Avoid exposing raw commit metadata beyond internal APIs