No author names or real submission events in code, comments, the panel prompt or test fixtures: synthetic names and a synthetic code package; comments describe a submission by month, not by ID
Security audit 2026-09-28: verified TLS on the drafts mailbox, no decision on the public status endpoint, inert sponsor SVGs, one download email per purchase, capped DOI downloads, credentials off the command line
