Please report a suspected credential leak, authorization bypass, unsafe benchmark execution path, or privacy issue privately through GitHub Security Advisories for this repository. Do not open a public issue containing secrets, personal data, or exploit details.

This repository contains public benchmark source, tests, manuscript assets, and bounded research records. It must not contain:

• provider keys or tokens;
• .env files or private route configuration;
• participant identity or contact data;
• live databases, private evidence archives, or production logs;
• unrestricted Epicure data payloads; or
• credentials embedded in notebooks, fixtures, issue text, or commit history.

Test credentials are syntactically fake and must remain unmistakably marked as non-real.

The public Hugging Face Space accepts response artifacts only. Do not upload API keys, private prompts, model weights, or provider configuration. Space scoring performs local reward-map lookups and never calls a model provider. The command-line runner reads credentials only from a named environment variable and deliberately omits them from response and report artifacts.

The latest tagged release and the default branch are supported public research snapshots.