Development record

abcd peers, on main, lists the uncommitted records it finds in every sibling worktree of the checkout, titles included. A private record held in a hand-run private worktree, or in the embargo store, is therefore shown to every local session that runs abcd peers, and a title alone can disclose a security report still under embargo. Under the security scope rule abcd adds that route itself, so the leak is abcd's to close. Found 2026-10-12 by the embargo steps 10-11 lane.