This is a hiring guide. No code to exploit, two things worth reporting fast anyway.

Guidance that would burn a hire or a company. People make real employment decisions off these pages, a charter pattern that fails, interview advice that crosses legal lines somewhere, a retention claim that is just wrong. Open an issue, it jumps the queue.

Anything person-identifiable. No candidate, employee, or company should be recognizable anywhere in here. If someone is, do not open a public issue. Use GitHub's private vulnerability report on this repo, or the contact on my profile, and it gets handled quietly and quickly.

No bounty program. The reward is one more security operator landing in a job that was described honestly.