> ## Documentation Index
> Fetch the complete documentation index at: https://docs.malmhq.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Security and data

> Keep credentials, customer data, and evaluation artifacts within clear boundaries.

# Security and data

## Credentials

Use a dedicated, restricted customer credential for evaluation. The plan names its environment variable; export the value locally or provide it through the approved secret path.

Never put a credential value in:

* CLI arguments;
* evaluation plans;
* prompts or chat;
* source control;
* issues, pull requests, or support requests.

## Candidate and evidence

Intermesh preserves the inspected candidate and evaluation artifacts in the workspace. Treat plans, prompts, traces, answers, and results as customer data.

Evaluation installation and execution have public internet access. Only evaluate trusted packages with scoped test credentials, not broad production credentials. Container isolation and log sanitization do not prevent credential exfiltration.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.