### Source Peer feedback, collected in #167. Quote (translated): would consider turning off the Apollo Sandbox that is under `/graphql` (important: this must be considered carefully together in the group); introspection is on in production. ### Why a decision The Sandbox and introspection help while developing and for the reviewers, but they show the whole schema to anyone, and the depth limit already makes an exception for introspection on purpose (`depthLimit.ts`). ### What to do - [ ] List the options: both on (as now), introspection on and the Sandbox page off, or both off in production (on in development). - [ ] Decide as a group, with the course in mind (the reviewers may want to try queries), and write the decision and the reason in `docs/API.md`. - [ ] If it changes, make it depend on `NODE_ENV` and test that production does not answer an introspection query. ### Done when - [ ] The choice is made, written down with its reason, and tested. _Comment made with Claude Code in discussion with Ronja_