shell: redact secret-bearing output #124
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "land/santi-shell-secret-redaction"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Redact high-precision secret fields and assignment/header forms before shell output enters durable ToolOutput history or provider replay. Preserve normal effect settlement, bound sanitized output to captured bytes, emit explicit redaction evidence, and cover the persisted result with synthetic credentials. Ectropy, Plumb Doctor, fmt, denied-warning workspace Clippy, and the complete locked workspace test suite pass.