{
  "repo": "core",
  "version": "7.33.7",
  "from": "af66de6b6e52c72e094d79a3308788bad6e08824",
  "to": "v7.33.7",
  "added": [],
  "removed": [],
  "changed": [],
  "narrowed": [
    {
      "id": "F1",
      "source": "behaviorFlips.summary",
      "text": "#1180 (security, narrowing): the OpenTelemetry OTLP exporter's header-list names — `OTEL_EXPORTER_OTLP_HEADERS`, `OTEL_EXPORTER_OTLP_{TRACES,METRICS,LOGS,PROFILES}_HEADERS` and the specification v0.7.0 spellings `OTEL_EXPORTER_OTLP_{SPAN,METRIC}_HEADERS` — are withheld by name, value-blind, from the children the scrub covers (the tool shell `NodeExecutionEnv` with the default `inheritEnv`, the default language-server spawn) (`SecretEnvFinding.kind` = `exact-name`, confidence `high`; `SecretEnvFindingKind` unchanged)."
    }
  ],
  "closedSetMembers": [],
  "closedSetsUnreadable": [],
  "typeKeys": [],
  "typeKeysUnreadableArms": [],
  "typeKeysFlattenedCount": 217,
  "declarationMoves": [],
  "mintMoves": [],
  "criteriaObserves": [
    {
      "kind": "engineNoticeCode",
      "name": "config.secret_env_scrubbed",
      "assertions": [
        "G1.c"
      ]
    },
    {
      "kind": "typeMember",
      "name": "SecretEnvFinding.confidence",
      "assertions": [
        "G1.a"
      ]
    },
    {
      "kind": "typeMember",
      "name": "SecretEnvFinding.key",
      "assertions": [
        "G1.b"
      ]
    },
    {
      "kind": "typeMember",
      "name": "SecretEnvFinding.kind",
      "assertions": [
        "G1.a",
        "G1.c"
      ]
    }
  ],
  "consumersHint": {
    "cli": [],
    "server": [],
    "sdk": [],
    "note": "scanned cli@4e593722 server@46b7fe60 sdk@8c379ef — a name listed is MENTIONED there today, which is evidence of consumption, not proof of it"
  },
  "breakingCount": 0,
  "breakingItems": [],
  "toResolvedAt": "27d0adda64b75d026baee92fc39e95b57bfef5a0"
}