Robin does not need API keys for offline mode and does not place trades.

Do not commit:

• .env files,
• broker credentials,
• exchange credentials,
• API keys,
• local checkpoint directories,
• generated experiment logs.

Report security issues privately to the project maintainer before public disclosure.