No-Secrets Guarantee: Redaction and Leak Tests

Design secret-handling: vault integration, redaction in logs, and automated leak scans on diffs, logs, and artifacts. Include fail-closed behavior.

Author: Assistant

Model: gpt-5.2