Order and document security
How public content, private orders and credentials are separated.
- private order screens are excluded from indexing
- files are associated with a controlled order record
- credentials are not exposed in public responses
- paid orders have recovery state
- public content is separated from the generation runtime