This repository is designed to contain public workstation configuration only. Do not commit credentials, private keys, personal network addresses, browser or agent sessions, machine reports, or machine-specific absolute home paths.

Use environment variables such as $HOME and checked-in example templates for configuration. Put personal values in ignored local override files. Run scripts/verify.sh before opening a pull request.

Do not open a public issue if you discover an exposed credential or other private data. Use GitHub's private vulnerability reporting for this repository, or contact the repository owner privately. Include the affected path and commit, but do not copy the sensitive value into the report.

If a real secret is committed, removing it in a later commit is not sufficient. Revoke or rotate it first, then coordinate repository-history cleanup with the maintainer.