Security and privacy Encrypted/private reasoning fields are never expanded or copied. Raw event payloads and images are excluded. Tool/status events require explicit opt-in. Common credential shapes are redacted by default, but pattern matching cannot guarantee secret removal. The manifest records source filename and SHA-256, not the absolute source path. Output is plaintext and must be reviewed before publication.