{"version":"2.1.251","anchor":"broader-secret-redaction","canonical_anchor":"broader-secret-redaction","heading":"Broader secret redaction","tier":"notice","area":"Privacy","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.251\/e\/broader-secret-redaction","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.251","markdown":"### Broader secret redaction\n\nFar fewer credentials leak into logs and output now.\n\n**What**\n\nThe pattern used to strip credentials out of output and logs was rewritten from a narrow check into one that matches many assignment shapes: passwords, tokens, API keys, JWTs and similar. Fewer secrets leak into what you or the model see.\n\n**Details**\n\n- Explicitly excludes `jobserver-auth` (a make internal, not a secret) and boolean-like values, to cut false redactions.\n\n**Evidence**\n\n`jobserver-auth`\n\n- Area: Privacy\n- Tier: You'll notice\n- Useful: 4\/5\n- Signal: 3\/5"}