No Hub upload from CI. No secret corpus in git. Restricted-intent surfaces refuse (see fixtures/dual_use/). Report issues privately to the operator. Do not file public exploit recipes.