The export validation rejects raw JWT-like values, private keys, AWS credential patterns, absolute local paths, personal email addresses and unsafe CSV formula prefixes.
The bundle is safe for public portfolio use because it uses synthetic local evidence, role-based ownership and relative repository paths.