Academic records are sensitive. Never commit real applications, names, emails, transcripts, internal IDs, conversion masters, review queues, or normalized outputs. Use encrypted, access-controlled storage and follow the owning institution's retention policy.

Report code vulnerabilities privately through GitHub's security-advisory feature.