blog
Blog
Notes on keeping secrets out of AI agents' context. RSS
Claude Code keeps printing my secrets: why hook redaction isn't enough
2026-10-10 · Agents leak API keys through output, tool-call arguments and generated code. Redacting output with hooks treats the symptom. Here's the architectural fix, and the base64 bug I found in my own redaction.