Security overview
Authentication, sessions, and permissions are enforced by the Flagship Tracker backend. The web app is presentation-only and does not connect to the database. A public security whitepaper will be linked here when it is approved for release.