Do not commit API keys, passwords, tokens, private customer files, raw standards, paid reference books, release binaries, local logs, or generated packages.

请勿提交 API Key、密码、Token、客户私有文件、原始标准文本、付费教材、发布二进制包、本地日志或生成压缩包。

AI API keys are intended to be stored only in the user's browser localStorage and sent to the local FastAPI process for the current request. They must not be written to reports, logs, source files, or packaged releases.

AI API Key 仅应保存在用户本机浏览器 localStorage，并仅在当前请求中发送给本地 FastAPI 服务。不得写入报告、日志、源码或发布包。

For security-sensitive reports, contact Knowptics privately before public disclosure.

安全问题请先私下联系 Knowptics，不要直接公开披露。