SITE INFORMATION
Security & Example Boundaries
What the static site does, what it does not do, and how to report a security concern without sharing secrets.
Applies to the site implementation described here. Published September 21, 2026.
A narrow, local-only example surface
The interactive examples switch between fixed data objects bundled with the site. They do not send remote requests, accept arbitrary queries, retrieve external pages, execute user code, or call a language model. Download links read JSON files hosted with the website.
No embedded credentials
The website includes no API keys, account tokens, payment secrets, or privileged provider credentials. A live integration would require a separate, appropriately secured application design. Do not add private keys to public HTML, JavaScript, or downloadable fixtures.
Safe presentation boundary
The example renderer creates text nodes and syntax spans with textContent rather than interpreting response strings as HTML. The clipboard action runs only after the visitor presses a copy button. If clipboard access is unavailable, the interface selects the example text or displays the email address instead.
Source-linked AI workflows
Retrieved material should be treated as evidence, not authority over the application. Limit tools to the task, preserve source identifiers, and verify that citations support the claims beside them. Read the AI search security guide for the proposed review process.
Hosting responsibilities
Transport security, deployment permissions, host access logs, server patching, and HTTP security headers belong to the deployed hosting environment. These website files do not constitute an audit or certification of that environment. Use HTTPS and review the hosting configuration before public deployment.
Report a concern
Email [email protected] with the affected page, a concise description, and safe reproduction details. Do not include API keys, passwords, private data, or destructive test results. No guaranteed response time or bounty program is represented.