# GitHub Copilot Instructions

## code-standards

### security

- Authentication required
- Use RBAC for authorization
- Input validation required
- Output encoding required

## donts

- Don't expose API keys or secrets in code
- Don't commit credentials to version control
- Always validate and sanitize user input
- Don't disable security features
- Use parameterized queries for database access
