Repository navigation

0.85.0: expanded redaction rules, saved keys, two-phase scan - #382

Merged

fylorn merged 37 commits into

mainfrom

feat/redact-rules-expand

Oct 29, 2026

Merged

0.85.0: expanded redaction rules, saved keys, two-phase scan#382
fylorn merged 37 commits into
mainfrom
feat/redact-rules-expand

Commits on Oct 29, 2026
- Redaction rules: scaffold for the expanded catalog
  
  fylorn
  and
  claude
  committed
  ab58241
- Redaction rules: personal-information catalog
  
  fylorn
  and
  claude
  committed
  8812ece
- Redaction rules: expanded credential catalog and saved secrets
  
  fylorn
  and
  claude
  committed
  93a9ada
- Merge remote-tracking branch 'origin/feat/redact-personal' into feat/redact-rules-expand
  fylorn
  committed
  2e3e4f9
- Redaction rule catalog as data: names and descriptions in both languages
  
  fylorn
  and
  claude
  committed
  bab1dab
- Redaction: two-phase scan (anchors first, then validators)
  
  fylorn
  and
  claude
  committed
  01c86fd
- Merge remote-tracking branch 'origin/feat/redact-two-phase' into feat/redact-rules-expand
  fylorn
  committed
  26b3d22
- Redaction: keep a placed value unless a replacing hit covers all of it
  
  fylorn
  and
  claude
  committed
  9f1a893
- Redaction: position rules scan in linear time
  
  fylorn
  and
  claude
  committed
  2496ae0
- Redaction: labeled values stay inside their JSON string
  
  fylorn
  and
  claude
  committed
  7a3470d
- Redaction: Slack webhook followed by punctuation is still replaced
  
  fylorn
  and
  claude
  committed
  3566374
- Redaction: path rules accept JSON-escaped slashes
  
  fylorn
  and
  claude
  committed
  30155fd
- Redaction: tab after the auth scheme; .env values with punctuation or spaces
  
  fylorn
  and
  claude
  committed
  11f2d83
- Redaction: a saved secret next to `.`, `-` or `_` is still found
  
  fylorn
  and
  claude
  committed
  9a29863
- Credential-to-network: allow only the API hosts of sk-compat and Qianfan keys
  
  fylorn
  and
  claude
  committed
  3ac41f8
- Saved secrets: take the host of an IPv6-literal address correctly
  
  fylorn
  and
  claude
  committed
  a22b277
- Credential-to-network: a saved key keeps its provider's hosts
  
  fylorn
  and
  claude
  committed
  6740176
- Saved secrets: access and control keys may go to the gateway's own address
  
  fylorn
  and
  claude
  committed
  00e6b94
- Gateway: report a saved secret a plugin adds even if another was reported
  
  fylorn
  and
  claude
  committed
  0f0e0dc
- Redaction oracle: compare the two scanners on mutated samples
  
  fylorn
  and
  claude
  committed
  cc9fbe4
- Tidy a test argument flagged by clippy
  
  fylorn
  and
  claude
  committed
  3571685
- Redaction: no length cap on placed values; keep failed .env scans local
  
  fylorn
  and
  claude
  committed
  1c72748
- Redaction: comma-separated Slack webhooks are each replaced
  
  fylorn
  and
  claude
  committed
  f240774
- Redaction: tab after the header colon; Proxy-Authorization
  
  fylorn
  and
  claude
  committed
  460205c
- Redaction: URL parameters after a JSON-escaped `&` or `=`
  
  fylorn
  and
  claude
  committed
  ce4252d
- Credential-to-network: borrow a built-in rule's hosts only when it lies inside the saved key
  
  fylorn
  and
  claude
  committed
  eb7241c
- Redaction: fewer false positives from the widened .env reading
  
  fylorn
  and
  claude
  committed
  b6f5d34
- Redaction tests: regression cases from the second review
  
  fylorn
  and
  claude
  committed
  cac46c2
- Redaction prescan: cut the cost of scanning prose
  
  fylorn
  and
  claude
  committed
  12657a4
- Merge remote-tracking branch 'origin/perf/redact-prose' into feat/redact-rules-expand
  fylorn
  committed
  77f93f8
- Redaction: count each backslash run once in a quoted .env value
  
  fylorn
  and
  claude
  committed
  4c23ca6
- Redaction: .env passwords with brackets or `;keyword…` are replaced again
  
  fylorn
  and
  claude
  committed
  fdaddc5
- Redaction: URL parameters the URL-token rule does not know are assignments
  
  fylorn
  and
  claude
  committed
  9dbcd3b
- Merge remote-tracking branch 'origin/fix/redact-review' into feat/redact-rules-expand
  fylorn
  committed
  0ef2a62
- 0.85.0: release notes, README, data source licences
  
  fylorn
  and
  claude
  committed
  b3a1217
- Keep LF in the embedded redaction data on Windows checkouts
  
  fylorn
  and
  claude
  committed
  4be853c
- Handover test: a write after the gate closes a wrong-token link may fail
  
  fylorn
  and
  claude
  committed
  ac3b935

Commits

Commits on Oct 29, 2026