Please report security problems privately. Do not create public issues or pull requests for security vulnerabilities.

• Never commit credentials, tokens, or API secrets
• Never put API keys in issues, PR descriptions, logs, or examples
• Keep workshop examples offline by default
• Prefer local fixtures and deterministic mock data for tests

This repository is intended for workshop and educational use. It should stay offline-first and free of external service requirements unless a specific exercise explicitly calls for them.