Security & privacy
Built so content cannot leak.
The private report and the public profile are different types, and the door between them only carries counts. That is a structure, not a promise.
Read-only sources
Every connection is read-only; installing a source never grants write access.
Counts, not content
Prompts, code, documents and client names are never stored and cannot be requested.
A wall in the types
Employer-facing code can name counts and never content, and a check refuses the build otherwise.
Your record, your switch
Disconnect any source, withdraw any profile. The public address goes dark.
Evidence without exposing private work.
Your prompts and code stay private. Your verified record stays portable.