Do not commit:

• .env
• cookies/
• outputs/
• .docker-config/

cookies.txt is equivalent to a login credential. Treat it like a password.

If an API key appears in logs, screenshots, Git history, or shared chat:

1. Revoke or rotate the key in the provider console.
2. Update .env with the new key.
3. Avoid sharing docker compose config output because it expands .env values.

Only process videos when you have the right to access and summarize the content.