Arhamurrahemeen

Guard rules for GROQ_API_KEY handling in ai_feedback.py and the .env file. Check before reading, printing, logging, or committing anything near the key.

Domain invariants for VitalSense's rPPG signal chain (dsp_pipeline.py, signal_extractor.py, hrv.py). Check any edit to these files against this before applying it.