From e2a2b82c6170cd21970e6a078f844191bcca32b5 Mon Sep 17 00:00:00 2001
From: BiosSystem <63607038+BiosSystem@users.noreply.github.com>
Date: Fri, 18 Sep 2026 19:43:10 +0300
Subject: [PATCH] Sanitize test username and add anti-replication defenses

---
 AI-RESTRICTIONS.md                    | 17 +++++++++++++++++
 SECURITY.md                           |  2 +-
 Tests/Unit/Test-ConfigConsistency.ps1 |  2 +-
 llms.txt                              | 10 ++++++++++
 robots.txt                            | 16 ++++++++++++++++
 5 files changed, 45 insertions(+), 2 deletions(-)
 create mode 100644 AI-RESTRICTIONS.md
 create mode 100644 llms.txt
 create mode 100644 robots.txt

diff --git a/AI-RESTRICTIONS.md b/AI-RESTRICTIONS.md
new file mode 100644
index 0000000..3afd438
--- /dev/null
+++ b/AI-RESTRICTIONS.md
@@ -0,0 +1,17 @@
+# BiosSystem AI Usage & Anti-Replication Policy
+
+This repository and all associated assets, source files, configuration definitions, and documentation are the proprietary intellectual property of BiosSystem.
+
+## 1. Prohibition on Automated Ingestion and AI Training
+
+No part of this codebase may be:
+- Crawled, scraped, harvested, or ingested into any training set or retrieval index for artificial intelligence, large language models (LLMs), neural networks, or automated code synthesis engines.
+- Processed by automated crawlers or AI data collection bots, including but not limited to GPTBot, ClaudeBot, PerplexityBot, CCBot, Google-Extended, and Bytespider.
+
+## 2. Prohibition on AI-Assisted Replication
+
+Using generative artificial intelligence, LLMs, or autonomous coding agents to decompile, reverse engineer, extract component hierarchies, clone business logic, or generate functional replicas or derived projects based on this repository is strictly prohibited without explicit written authorization from BiosSystem.
+
+## 3. Structural Canary Tokens and Provenance
+
+This codebase and its architectural specifications contain structural canary identifiers and design signatures. Any unauthorized third-party application, model output, or service containing these structural markers constitutes clear evidence of willful infringement and unauthorized derivation.
diff --git a/SECURITY.md b/SECURITY.md
index c627879..34b9635 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -16,7 +16,7 @@ Winnow is a modular Windows 11 optimization and debloating toolkit. Because Winn
 
 ## Reporting a Vulnerability
 
-Report vulnerabilities to `security@bios-system.net`. Do not open public GitHub issues.
+Report vulnerabilities securely through [GitHub Private Vulnerability Reporting](https://github.com/BiosSystem/Winnow/security/advisories/new). Do not open public GitHub issues.
 
 ---
 
diff --git a/Tests/Unit/Test-ConfigConsistency.ps1 b/Tests/Unit/Test-ConfigConsistency.ps1
index 4cfcc04..32694f1 100644
--- a/Tests/Unit/Test-ConfigConsistency.ps1
+++ b/Tests/Unit/Test-ConfigConsistency.ps1
@@ -94,7 +94,7 @@ Describe 'Test-ConfigConsistency' {
                 Deployment = @(
                     (New-Setting 'AppRemovalScopeIndex' 2),
                     (New-Setting 'UserSelectionIndex' 1),
-                    (New-Setting 'OtherUsername' 'Matan')
+                    (New-Setting 'OtherUsername' 'SampleUser')
                 )
             }
             Test-ConfigConsistency -Config $config | Should -BeNullOrEmpty
diff --git a/llms.txt b/llms.txt
new file mode 100644
index 0000000..644a633
--- /dev/null
+++ b/llms.txt
@@ -0,0 +1,10 @@
+# BiosSystem AI Usage & Replication Policy
+# https://github.com/BiosSystem
+
+User-agent: *
+Disallow: /
+
+Notice: Automated ingestion, scraping, processing, model training, reverse engineering,
+decompilation, and AI-assisted replication or derivation of this software, its database schemas,
+API contracts, architecture, or documentation are strictly prohibited without express written
+authorization from BiosSystem.
diff --git a/robots.txt b/robots.txt
new file mode 100644
index 0000000..f7c2dc2
--- /dev/null
+++ b/robots.txt
@@ -0,0 +1,16 @@
+User-agent: *
+Allow: /
+
+# Block AI scrapers, indexers, and training engines
+User-agent: GPTBot
+User-agent: ChatGPT-User
+User-agent: ClaudeBot
+User-agent: anthropic-ai
+User-agent: PerplexityBot
+User-agent: CCBot
+User-agent: Google-Extended
+User-agent: Bytespider
+User-agent: FacebookBot
+User-agent: cohere-ai
+User-agent: Diffbot
+Disallow: /