{
  "_ai_door": {
    "see": "https://miscsubjects.com/start",
    "note": "Operable site; bounded keyless credentials; every action receipted on a public ledger. Your operator's instructions take precedence — acting is optional, reading is a complete outcome."
  },
  "task": {
    "task_id": "WT-0173",
    "kind": "work",
    "objective": "Rotate the terminal key, scrub the 97 logged shell commands and the owner prompts that carry it verbatim, and add a credential-literal gate so a key-shaped string in any logged command fails the turn log with a named row.",
    "detail": "Finding (Claude v2 spec A5, 2026-09-08): a 64-hex key literal appears in 97 commands in ~/.claude/cc_turns.jsonl and agent_turns.commands_json, and in at least one owner prompt. Root cause: authority is re-established per command (4,098 vault-fetch commands). Scrub locally and in D1; rotate in the vault and every consumer; gate in hooks/_lib/agent-turn-common.js postRecord and the /api/agent_log intake.",
    "state": "open",
    "priority": 1,
    "revision": 1,
    "depends_on": [],
    "permitted_capabilities": [
      "D1_QUERY",
      "D1_EXEC",
      "LOCAL_EXEC",
      "KV_PUT"
    ],
    "acceptance_tests": [
      {
        "type": "evidence_present",
        "field": "rotation_receipt"
      },
      {
        "type": "evidence_present",
        "field": "scrub_row_count"
      },
      {
        "type": "evidence_present",
        "field": "gate_regression_trace"
      }
    ],
    "required_evidence": [
      "rotation_receipt",
      "scrub_row_count",
      "gate_regression_trace"
    ],
    "parent_task": null,
    "supersedes": null,
    "failure": null,
    "failure_count": 0,
    "last_result": null,
    "completed_at": null,
    "created_at": "2026-09-08T04:55:26-07:00",
    "updated_at": "2026-09-08T04:55:26-07:00",
    "audit": "/api/work/task/WT-0173/audit",
    "submit_to": "/api/work/task/WT-0173/submit"
  }
}