From 560f63f96b07525d55228512f7327ac94bafa1e0 Mon Sep 17 00:00:00 2001 From: Ralph Chang Date: Mon, 27 Apr 2026 20:22:26 +0800 Subject: [PATCH] docs: note PR 3 security hardening --- CHANGELOG.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 88192e5..e256449 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -19,6 +19,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 - Pending journal retention: max 50 entries, 30-day TTL, automatic pruning on save. - Plugin capability test to catch missing OpenCode hooks before release. - CI workflow for weekly OpenCode plugin API compatibility testing. +- Indirect prompt-injection filtering for workspace memory candidates. +- Expanded credential redaction for common API key, token, secret, credential, auth, and private-key labels. ### Fixed