• The default demo is offline and uses synthetic CATIA structure, file, and result data.
• Do not commit real vehicle models, supplier data, CATIA/CAA SDK files, generated interfaces, runtime logs, or local bridge configuration.
• The selected integrations/ files are source evidence only and are not a hardened remote-execution service.
• Keep the Python API bound to localhost during development and require an independent security review before exposing it to another machine.

Security issues should be reported privately to the repository owner.