Promote the round-eight review matrices into repository tables so the
scanner's contract is checked here rather than in a harness under /tmp.
Opener kind by value kind by suffix kind by serialization depth 0 to 3,
including the adjacent double-quoted segment whose first byte is a space
that leaked at depths 2 and 3. Truncated tails of each quote kind after each
root kind, including the escaped-quote tail whose remainder leaked. Even
backslash runs of 2, 4, 6 and 8 before a quote, a plain character, a space
and a line end.
Serialized rows assert the marker is gone, the output is stable, and the
output still parses as the JSON string it arrived as and decodes to the
redacted shell text. Truncated rows assert removal and stability only: a
serialized string cut inside the header argument loses its outer delimiter,
which is the contract's known over-redaction and never keeps a credential.
Claude-Session: https://claude.ai/code/session_01RYigf3eMFJjey9iKRApPGE
5ad32ccc87