This release rebuilds the local audit around credential exposure.
What's new
- Audits now detect credentials exposed in agent transcripts and group repeated sightings into a single finding.
- The audit dashboard shows the masked credential, where it appeared, which agent carried it, and what to rotate.
- Scheduled audits run every seven days after setup. They work locally without an account.
- Linux and macOS desktop notifications alert you while a credential remains exposed.
- Optional email alerts include the newest masked exposure and its source.
- Findings can be dismissed as "not a secret" without being rediscovered on the next scan.
Reliability and privacy
- Reduced false positives from variable names, scanner fixtures, public browser keys, and credential-research sessions.
- Fixed audit scans silently dropping databases after 128 SQLite connections.
- Fixed regex paths that could stall on large base64 blobs, URLs, and minified content.
- Redaction now covers JSON, YAML, spaced assignments, camelCase credential names, terminal output, and exported reports.
- Claude audits now include nested subagent and workflow transcripts.
- Malformed stored findings no longer break future scheduled audits.
OpenClaw
OpenClaw 2026.9.2 moved live transcripts from JSONL files to per-agent SQLite databases. failproofai now discovers and tails those databases, handles rewritten transcripts without
duplicate events, and keeps legacy JSONL support.
SQLite-backed sessions also appear again in the local dashboard and can be downloaded as JSONL.
Audit changes
The score, letter grade, projected score, persona report, and behavioral sections have been disabled. The audit now concentrates on concrete credential findings and scan statistics.
Other fixes
- macOS notifications are delivered through a per-user LaunchAgent.
- OpenCode and Pi no longer freeze their interfaces during non-blocking hook events.
- Audit help text now accurately describes scheduling, notifications, and --email.
- Added a repository-local skill for authoring enforcement policies.
- Updated dependencies and patched reported sharp and browserslist vulnerabilities.