Parent umbrella: #108\n\nGoal: keep secrets out of the UI/log path and preserve enough audit trail to reconstruct sensitive actions.\n\nFocus areas:\n- Check what can be logged from terminal, WebView, and host helpers\n- Avoid exposing tokens or credentials to right-pane scripts and agent-visible text\n- Ensure sensitive actions are traceable after the fact\n- Document what should and should not be persisted in worklist history or trace logs\n\nSuccess looks like: clearer boundaries for secret handling and a usable audit trail for incidents.
Parent umbrella: #108\n\nGoal: keep secrets out of the UI/log path and preserve enough audit trail to reconstruct sensitive actions.\n\nFocus areas:\n- Check what can be logged from terminal, WebView, and host helpers\n- Avoid exposing tokens or credentials to right-pane scripts and agent-visible text\n- Ensure sensitive actions are traceable after the fact\n- Document what should and should not be persisted in worklist history or trace logs\n\nSuccess looks like: clearer boundaries for secret handling and a usable audit trail for incidents.