The active product is a static HTML/JSON map. There is no deployed application server, database, authentication layer, or privileged write path.

See docs/SECURITY.md for the supported surface, contributor rules, and private reporting guidance.