Secret vault
Secrets are stored by name and used as {=NAME=} placeholders. The real value is filled in just before code runs, and known values are hidden in output.
How it works
- The model sees only the placeholder.
- The scan happens before filling.
- Output is cleaned by exact-value match. Values of 3 characters or fewer match as whole words only.
Limits
- The file is plain JSON, kept out of git.
- No chat command stores a secret yet.
- A script can print a transformed secret (reversed, encoded) that the cleaner will not recognise.
See also:Threat model
Checked against the source at commit f4fd89f on 29 Oct 2026. Everything here is merged on the main branch; no release has been tagged yet. The source is private, so these pages are the public description.