Project

Safety rules

• Never script a sign-in with real credentials, whether from a shell script or an AI agent. A person signs in and enters OTPs, then looktap takes over.
• Never burst or record a sign-in or passcode screen. The frames capture what's typed.
• Against a live backend, every tap is real. Use the smallest amounts, then undo what you created.
• Logs can contain tokens and personal data. Quote only the lines that matter, and don't commit screenshots of real customer data.

Generated from README.md. Edit it there.