openclaw

History

fix(context_engine): redact messages before compression to prevent at-rest secret leakage

_run_compression persists extracted substrings into ledger and sigil
files on disk. Previously it ran on raw messages, so credentials
matching decision/blocker patterns would be written to ~/.ra2/ in
plaintext. Now redact.redact_messages() is applied first, ensuring
only sanitised text reaches any disk-persisting path.

The redundant redact.redact(prompt) on the final assembled prompt is
removed since all inputs are already clean. The shrink loop correctly
re-estimates tokens after each reassembly.

https://claude.ai/code/session_01K7BWJY2gUoJi6dq91Yc7nx

2026-02-27 22:57:02 +00:00

tests

fix(ra2/token_gate): improve token estimation for code and multilingual content

2026-02-19 23:20:23 +00:00

__init__.py

feat(ra2): implement Context Sovereignty Layer (Phase 1)

2026-02-19 22:42:22 +00:00

context_engine.py

fix(context_engine): redact messages before compression to prevent at-rest secret leakage

2026-02-27 22:57:02 +00:00

ledger.py

feat(ra2): implement Context Sovereignty Layer (Phase 1)