Security

Public tracker links are read-only capability URLs. Private notes, permissions, billing data, and audit logs stay out of public projections.