MathForge is a local-first desktop/WebUI project. By default it stores personal PDFs, OCR outputs, exports, SQLite databases, and runtime caches under local/, which is ignored by Git.

Please report security issues through GitHub Issues while avoiding public personal data, API keys, private PDFs, or database files in the report. If a reproduction needs private material, describe the shape of the input and use a small synthetic sample instead.

• Do not commit local/, data/, work/, output/, outputs/, .venv/, or apps/web/node_modules/.
• Back up local/data/数学题库.sqlite3 before risky upgrades.
• Run scripts/cleanup_local_cache.py in dry-run mode before deleting local runtime cache.
• Optional OCR/model integrations should fail clearly when dependencies or model weights are missing; they must not fabricate OCR output.