# Quality and Safety

This repository is designed for public-safe release and repeatable validation.

## Repository checks

The GitHub workflows validate:

- PowerShell syntax and script analysis
- basic repository structure
- public-safety patterns
- accidental secret exposure

## Read-only principle

The audit scripts are intended to collect information and write local reports. They should not change AD DS, Entra Connect, Entra ID, users, groups, devices, sync settings or services.

## Generated data

Generated reports are intentionally ignored by `.gitignore`.

Before sharing any report:

1. Run the sanitizer helper where useful.
2. Review the output manually.
3. Confirm there are no real tenant, customer, domain, host, user or IP details.
4. Share only sanitized files.

Automation helps. Human review still matters, annoyingly.