If you discover a security vulnerability, please do not file a public Issue.

Report it privately via GitHub's "Report a vulnerability" feature: https://github.com/killian99cm/anchor-system/security/advisories/new

The core of this project's security is protecting personal holdings data:

1. .gitignore already excludes all sensitive data files
2. Run git status to confirm no sensitive files are accidentally staged
3. Do not paste holdings data in Issues/PRs/Discussions

1. Confirm .gitignore is in effect immediately after forking
2. Check for sensitive data before your first push
3. Use portfolio_data_example.json instead of real data

• GitHub Actions uses pinned versions (not @latest)
• Push operations restrict file paths to prevent accidental overwrites