Administrator 20b53f9587 docs(lessons): security-E2E must drive every collector default path, not just the aggregate hub ... Captures the two redaction leaks from the remote-diagnostics build: a hoster- returned opaque token surviving because value-scrub only covers stored config secrets, and the get_config_redacted/get_queue_state default paths skipping pattern-scrub entirely. The discriminator the first E2E missed, plus the rule: exercise each collector with its DEFAULT args and seed fixtures with a NON-config secret so you test pattern-scrub, not value-scrub by accident. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-19 17:49:14 +02:00
..
lessons.md	docs(lessons): security-E2E must drive every collector default path, not just the aggregate hub	2026-06-19 17:49:14 +02:00
todo.md	fix(queue): close two lost-work / sticky-ghost edge cases found by intensive testing	2026-06-19 06:51:48 +02:00