diff --git a/.gitignore b/.gitignore
index a30c255..29cdc54 100644
--- a/.gitignore
+++ b/.gitignore
@@ -5,9 +5,11 @@
 *.swo
 *~
 
-# Reference database (session data)
+# Reference database (session data) - Production and Dev
 .sysref
 .sysref.timestamp
+.sysref.beta
+.sysref.beta.timestamp
 
 # System-specific logs
 *.log
@@ -28,9 +30,15 @@
 .DS_Store
 Thumbs.db
 
-# Runtime directories
+# Runtime directories and cache
 /modules/security/temp/
 /modules/security/live-monitor-*/
+/config/
+/data/
+/logs/
+/tmp/
+/backups/
+/downloads/
 
 # Credentials and keys (NEVER commit these)
 *.key
diff --git a/.sysref.beta b/.sysref.beta
deleted file mode 100644
index d87d285..0000000
--- a/.sysref.beta
+++ /dev/null
@@ -1,35 +0,0 @@
-# System Reference Database
-# Generated: Thu Mar 19 08:28:56 PM EDT 2026
-# Format: Type|Field1|Field2|...
-
-[SYSTEM]
-SYS|CONTROL_PANEL|cpanel|11.134.0.10
-SYS|OS|almalinux|9.7
-SYS|WEB_SERVER|apache|2.4.66
-SYS|DATABASE|mariadb|10.6.25
-SYS|LOG_DIR|/var/log/apache2/domlogs|
-SYS|USER_HOME|/home|
-SYS|CPU_CORES|2|
-SYS|HOSTNAME|cloudvpstemplate.host.pickledperil.com|
-SYS|PHP_VERSION|8.0.30|
-SYS|PHP_VERSION|8.1.34|
-SYS|PHP_VERSION|8.2.30|
-
-[USERS]
-USER|pickledperil|pickledperil.com|1|1|134|/home/pickledperil
-
-[DATABASES]
-DB|pickledperil_wp_wt6lz|pickledperil
-unknown|pickledperil.com|0.78|12
-
-[DOMAINS]
-DOMAIN|pickledperil.com|pickledperil|/home/pickledperil/public_html|/etc/apache2/logs/domlogs/pickledperil.com|ea-php81|yes|primary|www.pickledperil.com|500|500|500_ERROR
-DOMAIN|www.pickledperil.com|pickledperil|/home/pickledperil/public_html|/etc/apache2/logs/domlogs/pickledperil.com|ea-php81|no|alias|pickledperil.com|500|500|alias_of_500_ERROR
-DOMAIN|67-227-141-132.cprapid.com|unknown||/var/log/apache2/domlogs/67-227-141-132.cprapid.com||unknown|local||timeout|timeout|TIMEOUT
-DOMAIN|cloudvpstemplate.host.pickledperil.com|unknown||/var/log/apache2/domlogs/cloudvpstemplate.host.pickledperil.com||unknown|local||200|200|200_OK
-
-[WORDPRESS]
-WP|pickledperil.com|pickledperil|/home/pickledperil/public_html|pickledperil_wp_wt6lz|pickledperil_wp_7vcwf|6.9.1|2|3
-
-[LOGS]
-
diff --git a/.sysref.beta.timestamp b/.sysref.beta.timestamp
deleted file mode 100644
index ca72f1e..0000000
--- a/.sysref.beta.timestamp
+++ /dev/null
@@ -1 +0,0 @@
-1773966543
diff --git a/data/suspicious-login-monitor/baseline.dat b/data/suspicious-login-monitor/baseline.dat
deleted file mode 100644
index 87c5377..0000000
--- a/data/suspicious-login-monitor/baseline.dat
+++ /dev/null
@@ -1,8 +0,0 @@
-# Baseline data for suspicious login monitor
-# Last updated: Thu Feb  5 08:37:33 PM EST 2026
-BASELINE_SSH_KEY_COUNT=1
-BASELINE_USER_COUNT=3
-BASELINE_TYPICAL_LOGIN_HOURS="19"
-BASELINE_PASSWORD_CHANGES_PER_WEEK=0
-BASELINE_NEW_USERS_PER_WEEK=0
-BASELINE_LAST_UPDATE=1770341853