Skip to content

docs: reword a banned leak-term flagged by the enforced ban list#1422

Merged
laurentiu021 merged 1 commit into
mainfrom
docs/scrub-auto-generated-leakterm
Jul 10, 2026
Merged

docs: reword a banned leak-term flagged by the enforced ban list#1422
laurentiu021 merged 1 commit into
mainfrom
docs/scrub-auto-generated-leakterm

Conversation

@laurentiu021

Copy link
Copy Markdown
Owner

Summary

Fresh ultra-audit finding (leak-audit, P3), verified against current source.

leak-terms.txt (line 28) bans a specific compound term case-insensitively, and the pre-commit hook builds its blocking regex from that exact file. Yet three tracked lines still contained that term:

  • ARCHITECTURE.md:37 — nav-group subtitle description
  • CHANGELOG.md:1736 — a historical entry (nav subtitle)
  • CHANGELOG.md:2094 — a historical entry (CodeQL obj/+bin/ exclusion)

This conflicts with the enforced zero-tolerance list and would block the pre-commit hook on any future edit that touches those files.

Fix

Reworded to meaning-preserving synonyms outside the ban regex:

  • the two nav-subtitle lines to 'derived from child labels'
  • the CodeQL note to 'compiler-generated code'

The tracked tree is now literally zero-match against the ban list for this term (grep returns nothing).

Docs-only change: no version bump, no release.

leak-terms.txt line 28 bans 'auto-generated' case-insensitively and the pre-commit
hook builds its blocking regex from that file, yet three tracked lines contained the
term: ARCHITECTURE.md:37 (nav subtitle) and CHANGELOG.md:1736/2094 (historical
entries). This conflicted with the enforced zero-tolerance list and would block the
pre-commit hook on any future edit to those files. Reworded to meaning-preserving
synonyms outside the ban regex — 'derived' for the nav-subtitle lines and
'compiler-generated' for the CodeQL-exclusion note — so the tracked tree is now
literally zero-match against leak-terms.txt.

Source: fresh multi-agent ultra-audit (leak-audit dimension), P3, confirmed by
adversarial verification against current source. docs: — no release.
@laurentiu021 laurentiu021 merged commit c606f1e into main Jul 10, 2026
4 checks passed
@laurentiu021 laurentiu021 deleted the docs/scrub-auto-generated-leakterm branch July 10, 2026 21:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant