JakubSECURITY / RESEARCH
← All write-ups

evidence-redaction-gate: a fail-closed gate for your evidence

A fail-closed, offline gate that stops secrets and PII leaking into security-research evidence before you attach it anywhere.

Redaction tools help, but only if you remember to run them. evidence-redaction-gate is the backstop: a gate that refuses to let evidence through if it still contains secrets or PII.

It is fail-closed — if it cannot be sure the evidence is clean, it blocks — and it is offline, so nothing you are checking ever leaves your machine.

What it does

  • Scans evidence for secrets and PII before it is shared.
  • Fails closed: uncertain means blocked, not allowed through.
  • Runs fully offline.
  • Drops into a pre-submission step or CI, so nothing leaks by accident.

Think of it as the last door between your working files and a public report.

View evidence-redaction-gate on GitHub