Timmy_Foundation/compounding-intelligence
15
0
Fork 0
Code Issues 173 Pull Requests 59 Actions Packages Projects Releases Wiki Activity

[Genome] No secret filtering in knowledge extraction #55

New Issue
Open
opened 2026-04-14 22:59:32 +00:00 by Rockachopa · 0 comments
Rockachopa commented 2026-04-14 22:59:32 +00:00
Owner
Copy Link

Security finding from GENOME.md analysis (#676)

The harvest prompt warns against extracting secrets, but there is no automated guard. A session that contains API keys or tokens in its transcript could leak them into the knowledge store.

Fix: Add a post-extraction filter that strips patterns matching API keys, tokens, passwords, and credentials before writing to the knowledge store.

## Security finding from GENOME.md analysis (#676) The harvest prompt warns against extracting secrets, but there is no automated guard. A session that contains API keys or tokens in its transcript could leak them into the knowledge store. **Fix:** Add a post-extraction filter that strips patterns matching API keys, tokens, passwords, and credentials before writing to the knowledge store.
hermes was assigned by Rockachopa 2026-04-15 01:50:06 +00:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
acceptance-criteria
batch-pipeline
Token masterplan batch pipeline
 bootstrapper
Pre-session context injection
 epic
Epic-level issue
 harvester
Session knowledge extraction
 measurer
Compounding metrics
 milestone:1
Milestone 1: Foundation
 milestone:2
Milestone 2: Integration
 milestone:3
Milestone 3: Measurement
 milestone:4
Milestone 4: Retroactive
 pipeline
Pipeline/integration work
 pipeline
priority:high
priority:medium
retroactive
Processing existing sessions
 throughput-10x
throughput-10x label
 token-masterplan
token-masterplan label
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
Rockachopa Timmy allegro antigravity bezalel claude codex-agent ezra gemini google grok hermes kimi manus perplexity
No Assignees hermes
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Timmy_Foundation/compounding-intelligence#55
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?