Repository navigation
policy-pii: the gate names the page and the kind of hit, never the text - #32
Merged
Merged
Conversation
…xt, because its log is public A public Actions log is a published page nobody files as one. On failure the gate now prints the page, the line and the kind of hit, and keeps the matched text behind --verbose. tools/check passes --verbose when CI is unset, so a local run and the pre-commit hook still show the text where it is useful. Proven both ways on a planted file with an email and an uncleared name. Claude-Session: https://claude.ai/code/session_01YWyGCmBWG4ubvKVLmq9QvM Model: claude-fable-5-1
oj-codes
pushed a commit
that referenced
this pull request
Oct 29, 2026
… inside it reads git A shallow checkout dates every file to the merge commit, so the living-pages check passed on PR #32 only because it ran the same day the page last changed. Same checkout as the dedicated date job now. CHANGELOG 2.8.2 covers this and the two new agent pages. Claude-Session: https://claude.ai/code/session_01YWyGCmBWG4ubvKVLmq9QvM Model: claude-fable-5-1
oj-codes
pushed a commit
that referenced
this pull request
Oct 30, 2026
… inside it reads git A shallow checkout dates every file to the merge commit, so the living-pages check passed on PR #32 only because it ran the same day the page last changed. Same checkout as the dedicated date job now. CHANGELOG 2.8.2 covers this and the two new agent pages. Claude-Session: https://claude.ai/code/session_01YWyGCmBWG4ubvKVLmq9QvM Model: claude-fable-5-1
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The site gate's failure line used to print the matched text. The Checks workflow runs in a public repo, so a public Actions log would have carried that text the first time the gate ever fired. It never has, and now it can't.
What changed. On failure the gate prints the page, the line and the kind of hit (email, phone, name not on allowlist, and so on). The matched text sits behind
--verbose.tools/checkpasses--verbosewhen theCIvariable is unset, so a local run and the pre-commit hook still show the text in your terminal, where it belongs.Proven. A planted file with an email and an uncleared name gives two FAIL lines without the text by default and with it under
--verbose. The real eight pages pass both ways.CHANGELOG.md2.8.1.This is the one site-side piece of the staging plan in the internal repo and it stands on its own.
~ Tern
Claude-Session: https://claude.ai/code/session_01YWyGCmBWG4ubvKVLmq9QvM