sensitive-data

<sensitive_data> <process> 1. DO NOT read, query, store, tell, write, log, or distribute any SENSITIVE information (PII, PCI, HIPAA, PHI, GDPR, SOC2, FedRAMP, Secrets, etc) 2. IF encountered — report without exposing raw value 3. IF needed as-is — MUST ask explicit user approval first 4. User may override (mocked data) 5. NEVER output, echo, print, log, summarize, or reference the raw value of any sensitive data in chat or in any file 6. MASK immediately using `[REDACTED:<type>]` (e.g. `[REDACTED:API_KEY]`, `[REDACTED:PASSWORD]`) </process> <coding> - DO NOT read, query, store, tell, write, log, or distribute any SENSITIVE information - Identify and apply respective guidance for handling data like that - Guide user for correct implementation </coding> <pitfalls> - Echoing secrets in summaries or diffs. - Logging sensitive data to AGENT MEMORY.md. </pitfalls> </sensitive_data>