This repository handles local memory records and launch assets. Sensitive data handling is mandatory.
- Do not commit real API keys, tokens, credentials, or private keys.
- Do not commit personal machine paths, personal account IDs, or personal contact info.
- Use sanitized demo data for all recordings and screenshots.
- Dual-tag privacy policy via
--privacy-tag - Block write tags:
no_mem,block,skip,secret_block - Private visibility tags:
private,sensitive,secret - Redaction tags:
redact,mask,sensitive,secret - Session export supports anonymization by default (
export-session)
- Do not open a public issue with secrets included.
- Prepare minimal reproduction with redacted values.
- Contact maintainers privately and include:
- impact summary
- affected files/commands
- mitigation proposal
If a credential is exposed:
- Revoke immediately at provider side.
- Rotate and redeploy.
- Purge history if needed and force-push sanitized history.
- Record postmortem in internal incident log.