Preference dossiers may contain human responses and local evidence references. Treat them as private unless every included item has been approved for publication.

The CLI rejects absolute evidence locators, parent-directory traversal, and URI schemes. It stores hashes, but it does not encrypt files or redact their contents.

Do not include credentials, access tokens, private customer data, or unapproved quotes in a dossier.

Report security issues privately through GitHub's security advisory feature.