Project OS Builder must never receive credentials, private keys, .env files, raw customer data, form submissions, SQL backups, or private server logs.

Do not open a public issue containing a vulnerability, secret, private path, or client evidence. Use the repository's private GitHub Security Advisory flow.

Include:

• affected version;
• minimal synthetic reproduction;
• expected versus actual safety behavior;
• whether a snapshot was promoted.

The current design-partner release is v0.1.1.