This repository serves the static public website for CATalyst through GitHub Pages.

• The site is static HTML/CSS/JS only. It does not accept form input, store user data, or run a backend service.
• Pages must use HTTPS-only asset links. Avoid plain-HTTP URLs.
• Avoid third-party scripts, analytics, widgets, remote fonts, and embeds.
• External links must use rel="noopener" when opened in a new tab.
• Keep the Content Security Policy in index.html and docs.html aligned with the smallest needed permissions.

When public downloads are enabled:

• Link only to the official CATalyst public GitHub release channel.
• Show the release version, release notes, file size, and SHA-256 checksum next to each download.
• Do not use mirrors, URL shorteners, chat-only installer links, or files uploaded directly into this website repository.
• Keep release asset names predictable, for example Catalyst-Setup-vX.Y.Z.exe.
• CATalyst must never ask users for a seed phrase or private keys. Sage signs locally.

Report normal beta bugs and website/download issues through the public bot repository:

• Bug reports: https://github.com/catalystxch/catalyst-bot/issues/new?template=bug_report.yml
• Feedback: https://github.com/catalystxch/catalyst-bot/issues/new?template=feedback.yml

Do not post seed phrases, private keys, wallet backups, API keys, .env files, database files, or other secrets in public issues. If a report is security-sensitive or contains private data, use the early-tester support channel instead of opening a public GitHub issue.