# Test fixtures

- `groq/` — canned Groq responses for `E2E_FIXTURE_MODE` (see `utils/groq_client.py`, ADR-0013).
- `fake-service-account.json` — **not a real credential.** A throwaway RSA key generated locally
  (`openssl genpkey`) and never registered with any Google Cloud project. It exists only so
  `firebase_admin.credentials.Certificate()` has a syntactically valid key to parse when the
  backend initializes against the local Firebase Emulator Suite in E2E tests
  (`playwright.config.ts`) — the emulators never validate it against real Google infrastructure.
  If a secret scanner flags this file: it's a known, intentional fixture, not a leaked key.