This repository contains Markdown instruction files and a structural validation script. The validator reads tracked files only; it does not execute matched code, access the network, or modify repositories.

Treat changes to instructions, scripts, CI, and installation commands as supply-chain- sensitive; CI actions are pinned to full commit SHAs. Report vulnerabilities privately through GitHub Security Advisories for this repository. Do not publish compromised installation commands or exploit details in a public issue.