- Never commit credentials. The NIM key and PayPal Sandbox credentials are read from local files outside the repository.
- Federation-edge admission and disclosure policies are tested, not formally proved. Do not rely on them in production.
- Report vulnerabilities privately to security@veraxis.io.