This public repository is intentionally static and requires no credentials.

• no customer data;
• no supplier pricing from real projects;
• no real drawings, CAD or photographs;
• no passwords, API keys or private endpoints;
• no private persistence configuration;
• no copyrighted engineering books/manuals/reference files;
• synthetic values must remain clearly labeled.

• the demo does not provide regulatory or legal compliance approval;
• risk scores are decision support only;
• missing information must remain visible;
• a calculated value must not be visually presented as a measured fact;
• high-impact decisions remain behind a human gate;
• revision changes should invalidate stale conclusions where applicable.

If a secret is ever committed, treat it as compromised: revoke it, remove it from the tree, and clean reachable Git history when appropriate.