This repository is a public demo that uses synthetic data. It is not a production application and should not receive confidential, client, employer, or personal information.

Do not commit API keys, tokens, passwords, private keys, or environment-specific credentials. Runtime credentials should be stored in the hosting provider's secret manager and referenced only from server-side code.

If you find an exposed secret or a security issue in this demo, please report it through the repository owner rather than opening a public issue with sensitive details.