Your Name
803b389f6b
run-migration / migrate (push) Failing after 20s
CD Pipeline / build-and-deploy (push) Successful in 9m10s
security(secrets): 替換 test fixture 真 TG bot token 為假值
## 事件
aider-watch v1 session 把真 production TG bot token（NEMOTRON_BOT_TOKEN）
當成 test fixture 寫入下列 tracked 檔（均已 push Gitea）:
- apps/api/tests/test_secret_redactor.py
- docs/superpowers/plans/2026-04-19-aider-watch.md (3 處)
- docs/superpowers/plans/2026-04-20-aider-watch-v2.md
違反 feedback_secrets_leak_incidents_2026-04-18.md L2 零信任（source control 無 secrets）。
## 處置
- 統帥決議：不撤銷 token（接受風險）
- 替換為假值 111222333:A*35（明顯 placeholder，仍符合 redactor 判別格式）
- 減少未來 search engine / fork 的暴露面（但 git history 仍存）
## 驗證
secret_redactor.py 8 個 test 全過，telegram regex 仍能辨識新假值格式。
## P1 backlog
- git history 清理（git filter-repo）需統帥批准 force push
- pre-commit hook 防未來再洩（grep TG token 格式 / detect-secrets）
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-20 04:23:09 +08:00
..
2026-04-01 19:39:41 +08:00
2026-04-02 09:38:03 +08:00
2026-04-04 12:31:36 +08:00
2026-04-04 12:31:36 +08:00
2026-04-04 12:31:36 +08:00
2026-04-05 14:22:29 +08:00
2026-04-05 02:24:23 +08:00
2026-04-06 14:08:28 +08:00
2026-04-07 11:37:21 +08:00
2026-04-07 12:53:52 +08:00
2026-04-08 12:01:14 +08:00
2026-04-08 12:22:05 +08:00
2026-04-08 16:07:12 +08:00
2026-04-08 16:01:38 +08:00
2026-04-14 20:22:03 +08:00
2026-04-20 04:23:09 +08:00
2026-04-20 04:23:09 +08:00