nicolas/claude-leak-bench - claude-leak-bench - GITIX

Author	SHA1	Message	Date
Nicolas Massé	b848d82b58	Add redacted PR #47 subjects and show results as colored dots Bench svn-arv/redacted#47 (Rust rewrite) as is and with the entropy heuristic on. Known values are now escaped instead of using \Q...\E, which Rust's regex lacks. Subject files may live in subdirectories. Matrix cells become 🔴 (sent to the API), 🟠 (transcript only) or 🟢. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GZY2T82aEHnuVC4ALzRcPh	4 weeks ago
Nicolas Massé	33f6825e54	Add a Results section to the README Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	4 weeks ago
Nicolas Massé	4c4a028bbb	Translate README to English Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	4 weeks ago
Nicolas Massé	3a8281edbe	Run Claude Code in a rootless podman sandbox by default Claude Code runs in a pinned, checksum-verified image on an internal network with no egress and a dummy credential. A proxy container is the only way out: it records every request and swaps in the real credential, which never enters the Claude Code container. The host's cached feature flags seed the sandbox config so tools such as Monitor stay available. --sandbox host keeps the previous in-process mode. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	4 weeks ago
Nicolas Massé	c4f4171302	Initial end-to-end secret leak bench for Claude Code pytest suite that runs claude -p behind a recording API proxy and checks whether a canary secret reaches the wire, the transcript or the answer. Cases: cat, Read, env, unlabeled random value, known value, tail -f in foreground/background, Monitor. Subjects: bare Claude Code (control) and the redacted PostToolUse hook. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	4 weeks ago