Please do not report credentials, private datasets, or infrastructure details in a public issue. Send a private report to the repository maintainers instead, including the affected file, a concise impact description, and reproduction steps that do not disclose the secret.

Never put API keys in source files, task packages, candidate JSONL, Docker layers, or logs. Use environment variables or a local ignored .env file.