{
  "_comment": "Floor below which a configured env value is treated as a doc stub / placeholder rather than a real key, so a var set to a short test value ('fake', 'sk-test') never blanks unrelated output. ONE physical file backs both ecosystems, exactly like credential-names.json beside it: agent_sanitizer.secrets.config reads DEFAULT_MIN_SECRET_LEN from here, and claude-hooks/lib/env-config.mjs imports it for the Layer-4 pre-gate — there is no second copy to drift.",
  "min_secret_len": 16
}