Screenshot checklist — verify every item before adding an image to this repo¶

This system was built under an NDA. The checklist exists because a screenshot leaks things a code audit won't catch — the audit for this repo found identifying information sitting in exactly the kind of place a screenshot would capture (a logo, a location dropdown). Go through every item below for every screenshot, not just the ones that seem risky.

Before you take the screenshot¶

[ ] The local instance has the neutral logo, not the real one. (Swap ui/public/logo.png — or wherever your local checkout points — before taking anything.)
[ ] The product name shown in the UI is generic, not any client-facing brand name.
[ ] Location/site dropdowns show placeholder values (e.g. Site A, Site B), not real configured site names.
[ ] Currency fields show a neutral code (e.g. USD), not a real regional currency.
[ ] Phone number placeholders/examples use a generic format (e.g. +1 555 …), not a real country code.
[ ] The language switcher is hidden or set to a single default language — don't screenshot a bilingual UI if the pairing itself is identifying.
[ ] You're logged in as a seeded demo user (@healthsys.dev / @example.com), not a real account.
[ ] Any incident, hazard, or observation shown is seed data, not something entered by a real user during testing.
[ ] Any file attachment visible (photo, PDF) is a placeholder you added yourself, not something uploaded during real use.

While reviewing the captured image¶

[ ] No logo, watermark, or favicon from the real brand is visible anywhere in the frame, including browser tabs.
[ ] No product name, real company name, or domain name appears in the page title, header, footer, or browser tab.
[ ] No real site/location name appears in any dropdown, table cell, or filter, expanded or collapsed.
[ ] No currency code, amount format, or phone number format hints at a real region.
[ ] The browser address bar (if visible) shows localhost or a neutral domain, not a real subdomain or the real deployment URL.
[ ] No browser chrome details leak anything — bookmarks bar, browser profile name/avatar, open tabs, extension icons.
[ ] No email address is visible outside the seed set (@healthsys.dev, @example.com) — check notification lists, "assigned to," "reported by," and audit trails, which often show more addresses at once than the main view.
[ ] No employee name, phone number, or contact detail belongs to a real person — check tables and dropdowns for entries beyond the ones you intentionally seeded.
[ ] No system notification, toast, or console/network panel is visible with real data in it.
[ ] If the screenshot includes a PDF/report preview, the report footer/header doesn't carry a real company name (some report templates default to placeholder text like "Your Company Name" — check for it, not just for a real name).

Before committing the file¶

[ ] EXIF metadata is stripped (screenshot tools sometimes embed device/username/location metadata; strip it explicitly, don't assume a screenshot has none).
[ ] The filename itself doesn't contain anything identifying (a real site name, a date tied to a real incident, a person's name).
[ ] The image is added under a path this repo's .gitignore doesn't already exclude, and isn't accidentally a copy of a raw/unreviewed capture (screenshots/raw/ is ignored for exactly this reason — review into a separate reviewed folder, don't commit straight from there).