Remove private/internal references from 2026-07-14 - #2
Open
boardwalk-bot[bot] wants to merge 1 commit into
Open
boardwalk-bot[bot] wants to merge 1 commit into
boardwalk-bot[bot] wants to merge 1 commit into
Conversation
Automated remediation for daily private reference scan.
![boardwalk-bot[bot]](https://avatars.githubusercontent.com/in/4148749?s=60&v=4){kind=small}
Contributor
Author
There was a problem hiding this comment.
Automated review: changes suggested
The change updates contributing guidelines but does not implement the actual removal of private references from commit messages or tooling, which are necessary for full remediation.
Findings
- blocker
CONTRIBUTING.md: The diff updates the contributing guidelines to prohibit private session links and internal model names. However, it does not perform the actual removal of the identified Claude session URL and model name from commit messages or configure tooling to prevent their emission, as implied by the PR's summary and stated goal of remediation. These actions are crucial for addressing the findings from the private reference scan.
Posted by the Boardwalk PR reviewer (non-blocking).
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Automated remediation from Boardwalk's daily private reference scan.
Summary: Two items warrant review in the commit-message trailers: a private-looking Claude session URL with an opaque session identifier, and a possibly non-public model/codename. No credentials, customer names, private infrastructure values, or confidential data were found in the changed files.
Findings addressed:
(commit message trailers):Claude-Session: https://claude.ai/code/session_01MK51DnD8bjW7JvkzHKDawd— Remove Claude-Session trailers from public commits and disable them in commit-generation tooling. Revoke, delete, or unshare the referenced session if link-based access is possible. Consider rewriting the commits if Boardwalk's policy permits, while recognizing that the original objects may remain retrievable from public mirrors.(commit message trailers):Claude Fable 5— Verify that "Claude Fable 5" was public and approved for attribution. If not, replace it with a generic attribution such as "AI-assisted contribution" or omit the synthetic co-author trailer, and configure commit tooling not to emit internal model names.Please review carefully before merging. If any finding involved an actual credential, rotate it out-of-band.