This repository must remain safe to clone and inspect publicly.

Do not commit:

• API keys, tokens, cookies, or private keys;
• model-provider configuration containing credentials;
• reusable agent session IDs;
• real novel workspaces or unpublished manuscripts;
• absolute personal home paths;
• private prompts or generated content without permission.

Run the bundled safety check before publishing changes:

python scripts/check_public_safety.py

For a private vulnerability report, contact the repository owner through the email listed on the GitHub profile.