# Credits

pi-secret-safe is a merge of ideas and code adapted from the MIT-licensed
projects below. Where an upstream project ships a LICENSE file, its copyright
line is reproduced exactly as it appears there. Where no LICENSE file exists,
no copyright holder is asserted and no copyright line is reproduced.

## pi-sentry

- Repository: https://github.com/kirang89/pi-sentry
- Author: Kiran Gangadharan
- License: MIT
- Copyright line: `Copyright (c) 2026 Kiran Gangadharan`
- Adapted: sensitive file and bash command rules, glob matching, strict-mode
  blocking, session message redaction.

## pi-mono-extensions — sentinel

- Repository: https://github.com/emanuelcasco/pi-mono-extensions
- Author: Emanuel Casco
- License: MIT
- Copyright line: `Copyright 2026 Emanuel Casco`
- Adapted: allow-once confirmation on a block, masked detection reporting.

## pi-redact (my-pi)

- Repository: https://github.com/spences10/my-pi
- Author: Scott Spence
- License: MIT
- Copyright line: `Copyright (c) 2026 Scott Spence`
- Adapted: SSH config redaction, private-key continuation across chunked reads,
  provider token patterns.

## secret-firewall

- Repository: https://github.com/arvoreeducacao/arvore-pi-extensions
  (package `packages/secret-firewall`)
- License: MIT (declared in that package's `package.json`)
- Copyright line: none available. The repository and the package contain no
  LICENSE file, so there is no upstream copyright notice to reproduce and no
  copyright holder is asserted here. The only LICENSE file in that monorepo
  belongs to an unrelated package.
- Adapted: environment and dotenv value discovery, placeholder plus
  shell-variable usability model, context redaction.

## pi-secret-safe

MIT, Copyright (c) 2025 Sid Shaytay.

Where upstream copyright notices exist under their MIT terms, they are retained
as reproduced above.