This public edition is for noncommercial research, evaluation, and demonstration. It is not a production security boundary.

Do not include API keys, access tokens, passwords, database files, private URLs, or personal data in public issues or pull requests. Use a private GitHub Security Advisory when available, or contact the repository owner through the GitHub profile.

• Keep provider credentials in local environment variables or a secret manager.
• Never commit .env, SQLite databases, deployment archives, or browser exports.
• Rotate credentials immediately if they appear in logs, commits, screenshots, or issue comments.
• The demo admin gate must not be used as production authentication.