# Test files use fake API keys for mocking — not real secrets
# Note: bare paths like the line below are NOT valid gitleaks fingerprints.
# The supported format is `<sha>:<file>:<rule>:<line>`. Gitleaks emits an
# "Invalid .gitleaksignore entry" warning for bare paths but still scans
# the file; concrete fingerprints below are the supported form.
tests/test_cli.py

# v1.0.1 hotfix artifacts — example keys in docs + test fixture, not real secrets
69e8577af2f9fee66c963719048ff46f118744c0:docs/plans/EXECUTION_PLAN_V1_0_1_HOTFIX.md:curl-auth-header:130
59d0874bfd6a8eeadb836dbf22512a9d2db9e5fe:docs/launch/blind-agent-coldstart-report-v1.0.0-fullwalk.md:curl-auth-header:124
31ff84c7e15065c067b6a264607167c734d63f48:tests/mcp/test_http_endpoint.py:generic-api-key:112

# Convention reminder: plan/handoff docs MUST use placeholders (e.g.
# `<leaked-key>`) instead of even partial-prefix references like
# `fnlt_defe75cb...` inside `curl -H "X-...-Api-Key:"` examples — the
# `curl-auth-header` rule matches the curl+header SHAPE, not the key
# value, so even redacted-looking partials trip the deploy gate. See
# the 2026-05-14 hygiene-batch deploy failure for context.

# codex-bugs-4pack-v2 historical commits — handoff/plan docs quoted the
# literal high-entropy test strings being scrubbed (`abc1234567890def...`
# / `envelope-hygiene-key-1234567890ab`) as evidence; the same iteration
# also scrubbed the test files at HEAD. The historical commits remain on
# main; HEAD docs are scrubbed to placeholders in the 2026-05-22 hotfix.
ed4132717707a259c313688ee8cee1a4a7997674:docs/handoffs/next-iter-fixtures/test-api-key-low-entropy.patch:generic-api-key:18
ed4132717707a259c313688ee8cee1a4a7997674:docs/handoffs/2026-05-21-codex-bugs-4pack-next-iter.md:generic-api-key:83
ed4132717707a259c313688ee8cee1a4a7997674:docs/handoffs/2026-05-21-codex-bugs-4pack-next-iter.md:generic-api-key:84
ed4132717707a259c313688ee8cee1a4a7997674:docs/handoffs/2026-05-21-codex-bugs-4pack-v2-plan.md:generic-api-key:453
ed4132717707a259c313688ee8cee1a4a7997674:docs/handoffs/2026-05-21-codex-bugs-4pack-v2-plan.md:generic-api-key:457
c685597bb87d0ab998787396182f4d7f8608f98d:tests/mcp/test_scope_enforcement.py:generic-api-key:706
