Skip to content

fix: harden vault section updates and add commit-time PII guardrails#30

Merged
Pedrohgv merged 6 commits into
mainfrom
fix/vault-gateway-section-intent-updates
Apr 26, 2026
Merged

fix: harden vault section updates and add commit-time PII guardrails#30
Pedrohgv merged 6 commits into
mainfrom
fix/vault-gateway-section-intent-updates

Conversation

@Pedrohgv
Copy link
Copy Markdown
Owner

Summary

  • Add deterministic section-targeted note updates to vault-gateway (section_append/section_prepend) with heading validation to prevent duplicate sections.
  • Enforce section-intent behavior in vault docs/playbooks so update flows read first, avoid silent append/prepend fallback, and ask for clarification on missing/duplicate headings.
  • Add layered privacy protections: deterministic staged PII scanner (scripts/pii_guard.py), pre-commit integration, CI Privacy Scan workflow, and OpenCode commit guard/skill wiring (opencode.json, .opencode/plugins/pii-commit-guard.mjs, .opencode/skills/pii-commit-check/SKILL.md).
  • Remove legacy GitHub-only agentic PII path in favor of deterministic commit-time checks plus manual in-session skill review.

@Pedrohgv Pedrohgv merged commit 110dc75 into main Apr 26, 2026
2 checks passed
@Pedrohgv Pedrohgv deleted the fix/vault-gateway-section-intent-updates branch April 26, 2026 21:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant