Before creating or updating public content, contributors and agents must anonymize private customer context in PR titles, bodies, comments and reviews; branch names and commit messages; and committed code, tests, fixtures and documentation. Never copy private customer data from support threads, investigations, logs or connected sources here.
Remove customer names; organization, repository, domain, tenant and account identifiers; identifying keys, paths and log excerpts; and private customer job, support or incident links. Keep credentials, known tokens and secrets private. Use neutral wording, synthetic data and minimal reproducible examples.
Check screenshot and recording pixels, captions and filenames before publication. Use synthetic reproductions or keep identifying evidence private. Publishing first and scrubbing later is unacceptable.
Preserve this repository's public identity, dependencies and intentionally public attributions, including public authors and third-party software. Do not add a real customer-name blacklist.
For existing inadvertent disclosures, stop propagating them and flag them privately for authorized cleanup. Do not delete content or rewrite history without approval.