Publish DevRunbook source

2026-09-03 04:09:17 +02:00
commit cfd2804e27
928 changed files with 161642 additions and 0 deletions
@@ -0,0 +1,22 @@
+# Secrets Exposure Audit
+
+Inspect repository and runtime configuration patterns for committed, logged or exported secrets without echoing sensitive values.
+
+## Purpose
+
+This is a publishable P0 built-in DevRunbook package. It is designed for the `inspect` work mode with default autonomy `diagnose` and risk tier `critical`.
+
+## Required context
+
+- Scope: Describe the repository, application and deployment boundaries to assess.
+- Redaction policy: Choose how potential secret findings should be represented in evidence and reports.
+
+## Completion
+
+- Potential exposures are safely fingerprinted, not reproduced.
+- Rotation and containment actions are prioritized.
+- Validation evidence and unresolved limitations are reported honestly.
+
+## Quality status
+
+Editorially reviewed and covered by static structure and determinism fixtures. It is not represented as execution-validated or battle-tested until the platform stores corresponding evidence.