Responsible OSINT and data minimization

1. State an authorized research question before collecting publicly available information.

2. Do not aggregate personal identifiers simply because individual details are public.

3. Record the source date and reliability, and distinguish fact from inference.

4. Avoid intrusive contact, automated account probing and publishing sensitive findings.

5. Exercise: produce an anonymized research summary using non-personal project data.

Scope: Education and testing on owned or explicitly authorized systems only.