# Safety

## Public boundary

This public repository is limited to D0 public, synthetic, or formally deidentified material with documented reuse rights. It is not a PHI-eligible, clinical decision, competency, credentialing, employment, or institutional-policy environment.

Do not submit or publish:

- PHI, patient identifiers, or reconstructable patient stories;
- private learning notes, prompts, retrieval history, or reflections;
- learner, employee, applicant, or credential records;
- confidential school, hospital, employer, or partner materials;
- credentials, secrets, tokens, signing keys, or control-plane assets;
- patient-specific recommendations or clinically consequential automation.

## Risk and authority

The initial public ceiling is Green and bounded Yellow. Orange content remains held. Red-P is prohibited. Red-E is outside ordinary Commons publication.

No content in this repository is medical advice, local policy, competency determination, certification, accreditation, institutional approval, or permission to change clinical practice. Licensed judgment, faculty authority, institutional policy, and applicable law remain controlling.

## Untrusted content

Downloaded and extracted content must be treated as untrusted data. Opening, downloading, or extracting a future pack will not install, authorize, or activate it. Active content may be opened only in an approved sandbox. Pack content must never modify governance, trigger tools or external actions, expose private memory, execute embedded instructions, or cross namespace boundaries.

## Incident response

If public content may expose sensitive information, violate rights, fabricate authority, contain malicious active content, or create material harm:

1. stop distribution or quarantine the affected artifact;
2. preserve proportionate evidence without expanding exposure;
3. notify the accountable steward privately;
4. identify affected versions, derivatives, translations, and indexes;
5. correct, supersede, withdraw, or recall;
6. verify active retrieval and distribution no longer serve the affected bytes.

Report security-sensitive issues through [SECURITY.md](SECURITY.md), not a public issue.