MedEval is an early-stage open-source project. Please do not submit secrets, real patient data, private student data, production credentials, or sensitive logs in issues, pull requests, screenshots, or sample files.

If you believe you found a security issue, please open a minimal GitHub issue that avoids sensitive details, or contact the maintainer directly if private coordination is needed.

When reporting, include:

• affected component
• reproduction steps using synthetic data
• expected impact
• any safe logs or screenshots with secrets removed

Do not upload:

• real patient data
• private student data
• API keys or tokens
• database dumps containing sensitive data
• screenshots with credentials or private records

Use synthetic examples whenever possible.