Skip to content

fix: sanitize remaining private references#6

Merged
roone-ruanaidh merged 1 commit intomainfrom
agent/ai/sanitize-private-refs
Apr 9, 2026
Merged

fix: sanitize remaining private references#6
roone-ruanaidh merged 1 commit intomainfrom
agent/ai/sanitize-private-refs

Conversation

@roone-dev-ai
Copy link
Copy Markdown
Collaborator

Summary

Security audit found remaining private references that were missed in the initial sanitization pass. Fixes all P1 and P2 findings before making the repo public.

  • Remove hardcoded username engineer from monitoring-check.sh
  • Remove private repo name enumeration (intent tasks lab roone.dev mkare)
  • Remove harness/ path reference
  • Rename com.roone.monitoring.plist to monitoring.plist
  • Fix CI glassworm path (utils/ -> artifacts/)
  • Replace 7 dead architecture/intent.md references with README.md
  • Replace lab/audits/ with artifacts/audits/ in skill files
  • Remove lab-auditor terminal name from pr-SKILL.md

Test plan

  • Grep for /Users/engineer, roone-dev, harness/, lab/audits, lab-auditor returns zero matches
  • No sensitive emails, credentials, or private repo structure leaked

roone-ruanaidh
roone-ruanaidh previously approved these changes Apr 9, 2026
@roone-dev-ai roone-dev-ai force-pushed the agent/ai/sanitize-private-refs branch from c733d19 to f68aeab Compare April 9, 2026 01:31
- Remove hardcoded username, private repo names, and org-specific
  comments from monitoring-check.sh
- Rename com.roone.monitoring.plist to monitoring.plist
- Fix CI workflow path: utils/glassworm-scan -> artifacts/glassworm-scan
- Replace architecture/intent.md references with README.md across 7 files
- Replace lab/audits/ with artifacts/audits/ in skill files
- Remove lab-auditor terminal reference from pr-SKILL.md
- Fix dead security-audit-scope.md reference in cis-benchmark-check.sh

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@roone-ruanaidh roone-ruanaidh merged commit 3c1c2ef into main Apr 9, 2026
14 of 15 checks passed
@roone-ruanaidh roone-ruanaidh deleted the agent/ai/sanitize-private-refs branch April 9, 2026 01:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants