This repository is a public showcase. It does not contain the private SWMS production source code, live data, generated documents, deployment configuration, or secrets.

Security review should focus on accidental disclosure risk in the public materials.

If you find private information, credentials, generated client records, or unsafe operational details in this repository, open a private security advisory or contact the repository owner directly.

Do not include sensitive details in a public issue.

Do not commit:

• real client records;
• site addresses;
• phone numbers or email addresses;
• report outputs;
• photos;
• source PDFs;
• generated DOCX, PDF, XLSX, or CSV files;
• logs;
• .env files;
• API keys;
• Supabase URLs, anon keys, service-role keys, or production deployment config;
• private git history.

Use synthetic examples only.

Agents used with this project should be treated as assistants inside a controlled workflow. They should not bypass validation, invent missing project facts, or mutate generated issue documents directly.

Before publishing changes:

1. Run a secret scan or equivalent text scan.
2. Confirm no generated outputs are staged.
3. Confirm no production source code was copied by mistake.
4. Confirm all examples are synthetic.
5. Confirm the repo has a fresh standalone git history.