Nightly Build (v0.12.1-nightly.202610220625.3db7b11f2)
Changes since v0.12.1-nightly.202610211647.29f996951b:
ad1a6b6 fix: refresh salvage branch at home turn end without git probes
9b6edc0 fix: reject replaced worktrees during session salvage
9f487d9 fix: preserve session branch when condensing by ID
60f6ba8 fix(redact): password keys get only the shared placeholder rules
53080f7 fix(redact): treat secret_access_key as a credential key shape
5217f57 fix(redact): tighten shell-stdin, identifier and placeholder rules
48d01ea fix(redact): keep merged placeholder rules scoped to key/value captures
1e298f1 docs(redact): document the identifier-assignment entropy exemption
3469664 fix(redact): limit masks and code literals to non-password keys
9cf5b0f fix(redact): keep literals out of the code-call exemption
714e1c0 fix(redact): only credential-shaped stems make an id key secret
d5718a4 fix(redact): restore exact scanner placeholders and flat key matching
6cb2894 test(redact): assemble AWS key fixtures at runtime
fab906c fix(redact): tighten credential context guards
bf721a8 fix(redact): preserve corpus code placeholders
91a67f5 fix(redact): preserve credential code assignments
2b7c122 fix(redact): preserve ordinary credential IDs
3d26ff0 Unify credential assignment key detection
c03b357 Fix credential identifier redaction gaps
4936465 fix(redact): allowlist compound pagination token keys (next_page_token)
5f70404 fix(redact): credential words in identifier keys disqualify entropy-guard suppression
24fef05 fix(redact): corpus-derived over-redaction guards for code-bearing transcripts
64adb53 fix(redact): close review-found leaks in account skip, allowlist, and quoting
5da3281 docs: renumber redaction layers for the shell-stdin pass
fac31d6 Tighten secret-shape patterns to reduce over-redaction
9587f1f Compose secretJSONKeyRegex from secretValueKeyShape
5bce0c4 Redact client secrets and shell-stdin literal transcripts