Privacy: catch concrete Notion page identifiers

[siddath]

Outcome

• reject concrete notion.so, notion.site, and app.notion.com page references
• reject raw 32-hex identifiers and lowercase/uppercase UUIDs
• fail closed when the target, recursive content scan, or binary enumeration cannot be read
• document the expanded generic CI safety net

No personal Life Planner content or identifiers are included.

Verification

• npm test — pass (validation, links, 10 unit tests)
• bash scripts/pii-scan.sh . — pass on the real public candidate
• isolated fake title-slug Notion, Notion Site, raw-ID, and uppercase-UUID fixtures — expected failure
• missing-root and injected content/binary scan failures — expected nonzero
• upstream private gate against this branch — contextual scan pass

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
lifeos	Ready	Preview	Sep 3, 2026 5:41pm UTC