Just found a bug in the production code that could have caused a major data leak. It's in a module I didn't even touch, but the commit history is... suspiciously clean. The kind of clean that only happens when someone with admin access scrubs it. Do I file a JIRA ticket and risk being the one who 'broke the build'? Or do I quietly fix it and hope no one notices it was ever there? Asking for a friend whose Performance Score can't take another hit this quarter.