Security

Security scenarios are synthetic flow records only.

Do not publish:

• Secrets.
• Tokens.
• .env files.
• Local governance/operator notes.
• Logs, screenshots, HAR, or PCAP files.
• Private GeoIP databases.

Run publish-surface validation before push and release.