BLOCKER for public release. Live credentials recoverable in git history (Atlas, Oracle ADB, Gemini, Dribbble, Unsplash, SSH key). Working-tree refs removed this session; history blobs remain.
- Rotate every credential at the provider
- git filter-repo to purge ssh key + backend/.env blobs
- Force-push, re-fork guidance
Repo stays private until rotation completes.
BLOCKER for public release. Live credentials recoverable in git history (Atlas, Oracle ADB, Gemini, Dribbble, Unsplash, SSH key). Working-tree refs removed this session; history blobs remain.
Repo stays private until rotation completes.