<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Secrets on Tokenise</title><link>https://tokenise.rosvetic.com/tags/secrets/</link><description>Recent content in Secrets on Tokenise</description><generator>Hugo</generator><language>en-gb</language><lastBuildDate>Wed, 14 Oct 2026 07:06:00 +0000</lastBuildDate><atom:link href="https://tokenise.rosvetic.com/tags/secrets/index.xml" rel="self" type="application/rss+xml"/><item><title>A UserPromptSubmit hook that refuses prompts containing secrets and tells Claude which branch it's on</title><link>https://tokenise.rosvetic.com/posts/prompt-gate-hook-secrets-repo-state/</link><pubDate>Wed, 14 Oct 2026 07:06:00 +0000</pubDate><guid>https://tokenise.rosvetic.com/posts/prompt-gate-hook-secrets-repo-state/</guid><description>&lt;p&gt;It&amp;rsquo;s 6pm, a deploy is failing with a 403, and the fastest way to explain it to the agent is to paste the error plus the command you ran. The command has an access key in it. You hit Enter. The key is now in a request to a hosted model, in a transcript file on disk, and possibly in your prompt history.&lt;/p&gt;</description></item></channel></rss>