Do not commit credentials, passwords, access tokens, cookies, private keys, shell history, package-manager credentials, or raw command environments.

Use generic paths such as <workspace> and <your-user> in documentation. Commit configuration only as .example files. Keep raw build logs, downloaded packages, firmware images, and machine-specific staged roots local and ignored.

If a secret is accidentally placed in Git history, stop publishing, revoke or rotate it, and rewrite the local branch before any push.