🤖 docs: forbid token leaks

Add explicit secret redaction guidance to workspace AGENTS.md. Tests: not run (docs change)
2026-07-21 01:05:24 -04:00 · 2026-01-30 12:05:56 +01:00
parent 682523d829
commit faa8917f2d
1 changed files with 2 additions and 0 deletions
@@ -193,6 +193,8 @@ memory/
 - github app tokens: short-lived, refresh via timer
 - anthropic api key: required for claude models
 - discord bot tokens: stored via agenix
+- never print tokens, keys, or credentials in chat/logs; always redact ("<redacted>")
+- when reporting env vars or command output, strip secret values entirely

 ## Know When to Speak
 group chats: receive everything. respond selectively.