Development record

2026-10-24 — The disembark graveyard, principles and press-release ingests secret-scan what they write with the bundled rules on the lifeboat directory, not the source repository's scanner settings; only disembark review, which already takes the source repository, scans with the source's settings. Those settings only add detection: the review runs the built-in scan over the lifeboat, as the other ingests do, and the scan under the source's settings beside it, and refuses what either refuses, so its scan is the union of the two and nothing the source declares can clear a built-in hit. Those three verbs are given only the lifeboat, their text comes from the person's own agent, and the bundled rules cover the common token shapes, so adding a source operand to each is not worth its surface. Revisit if a custom pattern or the gitleaks augmenter is ever needed for lifeboat prose.