The boundary gate's credential scanner greps source literally, so the redaction test's sk-ant fixture is now assembled with concat! — the runtime string is unchanged, the source no longer looks like a leaked key. The relay token-policy test built /policy.json-style paths that count as relative on Windows, so the config constructor's absolute-path check failed before the assertion ran; the paths now carry a drive prefix there. |
||
|---|---|---|
| .. | ||
| src | ||
| Cargo.toml | ||