chore(privacy): remove employer references from public toolkit - #82
intellegix wants to merge 1 commit into
Conversation
Replaces hardcoded 'ASR Dropbox' paths with environment variables across 8 files, and removes the employer framing from the Construction-BI agent. Found by a full-history leakage audit (2026-08-13). None of this is a secret or a trade secret - the formulas are standard construction accounting and the compliance content is published law. The issue is employer NEXUS: the repo named the employer, published its internal project list, vendor stack and Dropbox folder taxonomy, which weakens the Labor Code 2870 own-time carve-out. - loop_driver.py paths now point at ~/.claude/automated-loop/ (it ships in this repo, so the absolute path was wrong as well as leaky) - decomp/ROM dirs -> $GBA_DECOMP_DIR, $NDS_ROM_DIR - Raken reference dir -> $RAKEN_REFERENCE_DIR (also drops the employer's '08_Financial_PayrollOperations/Certified Payroll' folder taxonomy) - Construction-BI: dropped employer name and internal project list; the generic construction-BI domain knowledge is unchanged Not pushed. Sanitization only - no files moved, deleted or relicensed. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01R1Dfu6aeAVFCoMDRbiD18w
|
Austin approved opening this pull request by voice, and he has not approved merging it. Merging publishes to a public repository, which is his decision alone, so this carries a do-not-merge label and no automated sweep should take it. The change removes employer-identifying material and adds nothing. Verified before the push that the tracked sanitized CLAUDE.md is byte-identical to master and is not part of this branch. |
|
Not merged, and I want to be explicit about why, because there is a conflict between two instructions here. The brief driving today's sweep grants an exception that would let this one merge. This PR also carries the So: held, reported, untouched. Austin, this is the privacy pass that strips employer references from the public toolkit. If the label is stale and you want it in, say so and remove the label. |
1 participant
Austin approved opening this by voice on 2026-08-20. It is ready for review but should not be merged without him — merging publishes to a public repo, which is his gate.
Removes employer-identifying material from the public toolkit: eight hardcoded absolute paths into an employer Dropbox tree, the employer name in the Construction-BI agent description and prompt, and the internal project list in that agent's scope section. Replaces them with environment variables and generic descriptions.
Ten files, 13 insertions, 12 deletions, one commit. Nothing else changes — no behavior, no logic, no new content. The tracked (sanitized) CLAUDE.md is untouched and byte-identical to master; verified before pushing.
🤖 Generated with Claude Code