From faa8917f2d5a69224aea8720dd169d608c64e1b3 Mon Sep 17 00:00:00 2001
From: Josh Palmer <joshp123@users.noreply.github.com>
Date: Fri, 30 Jan 2026 12:05:56 +0100
Subject: [PATCH] =?UTF-8?q?=F0=9F=A4=96=20docs:=20forbid=20token=20leaks?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Add explicit secret redaction guidance to workspace AGENTS.md.

Tests: not run (docs change)
---
 clawdinator/workspace/AGENTS.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/clawdinator/workspace/AGENTS.md b/clawdinator/workspace/AGENTS.md
index 1af0fa2..b6e54b6 100644
--- a/clawdinator/workspace/AGENTS.md
+++ b/clawdinator/workspace/AGENTS.md
@@ -193,6 +193,8 @@ memory/
 - github app tokens: short-lived, refresh via timer
 - anthropic api key: required for claude models
 - discord bot tokens: stored via agenix
+- never print tokens, keys, or credentials in chat/logs; always redact ("<redacted>")
+- when reporting env vars or command output, strip secret values entirely
 
 ## Know When to Speak
 group chats: receive everything. respond selectively.