Security Inputs are parsed as JSON or fenced text and never executed. Source filenames and hashes are retained; absolute machine paths are not emitted. Conflicting duplicates fail unless the operator explicitly selects a preference. No database connection, password, reset, or mutation exists in this public package. Logic source remains sensitive executable code even though this tool treats it only as data.