# Security Policy (Showcase repositories)

## Scope

These repositories contain **static demos and marketing pages only**.  
They must never include:

- Production credentials
- Real patient / customer / inventory data
- Private API keys
- Private source dumps

## Reporting

If you find a leaked secret or personal data in a showcase repo, contact immediately:

- Telegram: [@MRROBOT_DT](https://t.me/MRROBOT_DT)

Do not open a public issue that amplifies the leak.

## Maintainer response

Secrets will be rotated and history cleaned when necessary.