Stale processes course slide decks and job postings — other people's teaching material and other companies' listings. Treat both as borrowed.

• Do not post real API keys, session metadata with account-linked IDs, or slide decks you don't have the right to share in a public issue. Use synthetic excerpts; the .env.example shapes exist for this.
• Report prompt-injection via slide content, citation-spoofing, or data-exposure bugs through GitHub private vulnerability reporting. Include the affected version, impact, and a synthetic reproduction — never a live curriculum.
• Supported release: the latest main.