Isolated
Customer files stay separate from live trading infrastructure.
Customer EA files should be treated like private commercial code.
The MVP stores files per order and gates customer access with a private token.
Least access
Customer links expose only that order; admin access is separately protected.
Before launch
HTTPS, encrypted backups, firewalling, rate limits and retention policy are production launch items.