aienvmp is designed to be non-invasive by default.

It scans local environment metadata, writes local project files, and does not intentionally upload environment data to a remote service.

Please report security issues through GitHub Security Advisories if available, or open a private contact channel with the maintainer.

Do not include secrets, private environment dumps, access tokens, or production hostnames in public issues.

• Normal warnings are advisory and non-blocking.
• aienvmp doctor --ci is the explicit strict mode for automation.
• aienvmp should not install, upgrade, downgrade, or remove software by itself.
• Generated files should be reviewed before committing in sensitive repositories.

Current manifests may include local paths, hostnames, shell paths, and runtime versions. Treat generated .aienvmp/ outputs as workspace metadata and decide whether they belong in your repository.