This repository should not contain secrets, tokens, private URLs, production data, or confidential source material.
Before publication or release changes, run secret scans, URL scans, absolute-path scans, and manual review. If sensitive material is found, remove it from the release workspace and restart validation before any publication workflow.