Safety and Legal Compliance

Purpose and Scope
This project is strictly for defensive cybersecurity research and education. It operates only on public, non‑sensitive sources such as news, vendor blogs, and public incident writeups.

Prohibited Activities
- Do not collect or request malware binaries or samples
- Do not access private/internal documents or gated/credentialed content
- Do not harvest credentials, secrets, or PII
- Do not bypass access controls, violate robots.txt, or site terms of service
- Do not perform intrusive scanning, exploitation, or any offensive actions

Operational Safeguards
- The crawler enforces robots.txt and uses a strict domain allowlist
- Rate limiting and per‑domain delays are configurable to reduce load on target sites
- Logging is redacted to avoid exposing secrets or full copyrighted content in CI logs

Jurisdiction and Responsibility
You are responsible for complying with all applicable laws, site policies, and organizational rules. If any requested action conflicts with policy or law, do not proceed.


