Every repo now gets a secret check before each commit
Before each commit in our working copies, a check stops anything that shouldn't be saved, such as keys. We first added it on 25 Sept and rolled it out to every repo on 8 Oct. A person can still override it.
Read more
Our AI tools write a lot of files, so we added a routine safety check.
What changed
- A hook scans what's about to be committed.
- If it finds text that should stay private, the commit stops until it's fixed.
- It also strips keys out of the saved AI chat transcripts we keep.
- It's opt-in for each working copy, and it's switched on when a Claude Code session starts.
- A person can still override it on purpose, so it's a safety net, not a guarantee.
Keys and passwords stay in environment files and never get committed.






