syntaqxA path is not a secret: the redactor's long-random-string rule read a run joined by / as one string, so on flagon-io/g1t a session's own tool call showed as cat "C:[redacted].output" (AppData/Local/Temp/claude/c--Users-…-3fcf65eb-fb45-… is long, mixed-case and has digits). A / now ends a run, and a path is judged a folder at a time. Keys of known formats, prefixed tokens and AWS secret keys are still found by their own rules. Checked: cargo test -p g1t-scan (72; the path is in the ordinary strings now), -p g1t-work (214).6691441History