LR-SOC-Copilot processes local alert and runbook files. Security reports should focus on unsafe local file handling, unintended data disclosure, dependency issues, or violations of documented evidence boundaries.

Do not post real incident data, credentials, customer identifiers, or private runbooks in public issues.

The project does not perform containment, exploitation, credential collection, or autonomous response.