Please do not open a public issue for a security problem.
Report it privately to the Team Lead, or by email to qabas.ai.team@gmail.com. Include:
- What the problem is
- How to reproduce it
- What the impact could be
We will respond as soon as we can.
If a password, key, or token was committed or posted by mistake:
- Tell the Team Lead immediately.
- Rotate or revoke the secret.
- Do not rely on deleting the commit or message. Assume the secret is exposed.