This repository contains a terminal-based support-ticket triage agent that reads a local support corpus and may call Groq for response generation. It is not a hosted service, and no response-time or support-level guarantee is provided.

The default branch is the maintained development line. The repository does not currently publish versioned releases or a supported-version matrix.

Please do not open a public issue for credentials, personal data, payment information, exploit details, prompt-injection research involving private data, or other sensitive material. Report suspected vulnerabilities privately to the repository owner through the vincenzo-afk GitHub profile. If GitHub private vulnerability reporting is enabled for this repository, use that channel instead.

Include the affected file or component, a concise impact description, reproduction steps that do not expose real secrets or personal data, and any suggested mitigation. Redact API keys and identifiers from logs before sharing them.

Store GROQ_API_KEY and any local overrides in .env, which is ignored by Git. Do not hardcode credentials in source, prompts, documentation, issue reports, CSV fixtures, or debug logs. Review generated output and local corpus additions for personal or payment information before committing them.

The escalation rules are a defense-in-depth measure for prompt injection, destructive requests, sensitive PII, fraud, identity theft, access-boundary requests, score manipulation, outages, unsupported security reports, and insufficient context. They are not a complete security guarantee; deployments should apply their own access controls, secret management, monitoring, and data-retention policies.