# Verified false positives (checked 2026-10-30, all identifier substrings or
# deliberate synthetic canaries; no real credentials). Fingerprints are
# stable across line-number shifts.
# tests/test_acp_cli.py:155 — deliberate synthetic canary proving CLI dry-run
# redaction; the value is literally SYNTHETIC_MCP_SECRET_NOT_A_CREDENTIAL.
fp:49e12566dc92f5b6
# src/agent_session_control/acp.py:594 — CLOSE_CONFIRM_TIMEOUT constant.
fp:15e7042db703de19
# src/agent_session_control/runtime.py:354,375 — MCP_CHANNEL_FLAG / MCP_CHANNEL_OVERRIDE.
fp:8a9639856edc312b
fp:01c5dcdbbe230b30
# tests/test_acp_agent.py:43 — JSON Schema DRAFT202012 identifier.
fp:859de61620842ced
# Verified 2026-11-01: tests/test_acp_baseline.py — JSON Schema DRAFT202012
# identifier, not authentication material (same class as the entry above).
fp:7f520e4284b15bbc
# tests/test_security_transport.py — explicit synthetic redaction canaries
# (SYNTHETIC-SECRET-...-NOT-A-CREDENTIAL and FILE-CHANNEL-SECRET-xyz).
# Exact fingerprints only: other credential assignments remain scanned.
fp:48d3a28923ceb58f
fp:05dec3453c408664
# tests/test_engine_fidelity.py — durable-flaky-1 is a local idempotency key
# for the append-failure fixture, not an API authentication key.
fp:a1984db59da9bfed
