Your Name
803b389f6b
run-migration / migrate (push) Failing after 20s
CD Pipeline / build-and-deploy (push) Successful in 9m10s
security(secrets): 替換 test fixture 真 TG bot token 為假值
## 事件
aider-watch v1 session 把真 production TG bot token（NEMOTRON_BOT_TOKEN）
當成 test fixture 寫入下列 tracked 檔（均已 push Gitea）:
- apps/api/tests/test_secret_redactor.py
- docs/superpowers/plans/2026-04-19-aider-watch.md (3 處)
- docs/superpowers/plans/2026-04-20-aider-watch-v2.md
違反 feedback_secrets_leak_incidents_2026-04-18.md L2 零信任（source control 無 secrets）。
## 處置
- 統帥決議：不撤銷 token（接受風險）
- 替換為假值 111222333:A*35（明顯 placeholder，仍符合 redactor 判別格式）
- 減少未來 search engine / fork 的暴露面（但 git history 仍存）
## 驗證
secret_redactor.py 8 個 test 全過，telegram regex 仍能辨識新假值格式。
## P1 backlog
- git history 清理（git filter-repo）需統帥批准 force push
- pre-commit hook 防未來再洩（grep TG token 格式 / detect-secrets）
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-20 04:23:09 +08:00
..
2026-04-19 22:42:58 +08:00
2026-04-14 15:29:12 +08:00
2026-03-23 18:40:36 +08:00
2026-03-29 00:00:08 +08:00
2026-03-23 19:44:56 +08:00
2026-03-26 19:10:12 +08:00
2026-03-26 09:55:58 +08:00
2026-03-26 09:55:58 +08:00
2026-03-29 16:03:41 +08:00
2026-04-14 15:29:12 +08:00
2026-03-30 01:21:23 +08:00
2026-03-31 16:13:44 +08:00
2026-04-14 15:29:12 +08:00
2026-04-14 18:36:59 +08:00
2026-03-29 23:56:34 +08:00
2026-04-11 20:04:47 +08:00
2026-03-23 18:40:36 +08:00
2026-03-29 16:03:41 +08:00
2026-04-14 14:54:18 +08:00
2026-04-20 04:23:09 +08:00
2026-04-14 15:29:12 +08:00
2026-03-29 01:19:26 +08:00
2026-03-23 18:40:36 +08:00
2026-03-23 18:40:36 +08:00
2026-03-26 09:55:47 +08:00
2026-03-31 16:06:51 +08:00
2026-03-26 19:10:12 +08:00
2026-03-29 16:03:41 +08:00
2026-03-23 18:40:36 +08:00
2026-04-17 21:48:50 +08:00
2026-03-29 16:03:41 +08:00
2026-04-20 04:04:13 +08:00
2026-03-29 01:52:08 +08:00
2026-03-29 01:52:08 +08:00
2026-03-26 09:55:47 +08:00
2026-03-26 19:10:12 +08:00
2026-03-26 09:55:58 +08:00
2026-03-29 16:35:47 +08:00
2026-03-23 18:40:36 +08:00