This repository is documentation, templates, and lightweight validation scripts. Security concerns may include unsafe instructions, exposed credentials/private data, dependency/workflow problems, malicious links, or guidance that enables unintended high-impact actions.

Do not open a public issue containing a secret, exploit payload targeting a real system, private personal data, or information that would increase immediate harm.

Use GitHub's private vulnerability reporting if it is enabled for the repository. Otherwise contact the repository owner through a private GitHub channel and provide only the minimum information needed to establish a safe reporting route.

Include:

• affected file/section
• realistic impact
• safe reproduction or explanation
• suggested mitigation if known
• whether any credential/data was exposed and needs immediate revocation

The main branch is the maintained version. Git history remains available for reference but old benchmark, product, and policy information should not be treated as current.

Do not test instructions against systems, accounts, or people without authorization. Use synthetic data and local/sandbox environments. If a real credential appears in repository history, revoke it first; editing the visible file is not sufficient.