Trust

This section owns privacy, compliance, security, trust and safety, and regional readiness posture.

Area	Path	Boundary
Compliance	`compliance/`	GDPR, DSA, global product boundaries, regional compliance notes, and abuse/payment intersections.
Privacy	`privacy/`	Privacy notes and visitor data posture.
Readiness	`readiness/`	EU, APAC, China, global region, entity, data, and payment readiness planning.
Security	`security/`	Secrets, access, contributor permissions, AI work product, monitoring, and long-term security roadmap.
Trust and safety	`trust-safety/`	Content policy, abuse reporting, self-hosting responsibility, and UGC launch gates.

This section describes operating posture and readiness. It must not claim certifications, legal conclusions, or compliance guarantees unless the repository has explicit approved evidence.