This repository is a bounded public engineering reference for Agent Cash Cow OS. The production OS remains private and should not be reconstructable from this repository.

The public reference must not contain production credentials, live buyer/evidence data, private prompts, benchmark material, unpublished routing logic, or secret provider configuration.

If you find a security issue in this public reference, do not publish secrets, credentials, customer data, or exploit details in a public issue.

Report it to the repository owner using the contact email linked from the GitHub profile and include:

• repository and exact commit/ref;
• affected file or behavior;
• impact;
• minimal reproduction steps;
• whether any secret or private data may have been exposed.

Do not send real credentials or customer data as part of a report.

Security claims are limited to the code and tests visible in this repository. This policy does not imply production-scale security, provider correctness, forecast accuracy, or that the private production OS has the same architecture, dependencies, deployment surface, or threat model.