Protect paired history snapshots from disclosure

2026-11-02 14:58:52 +00:00
parent 3b10f97424
commit 1d8438b635
3 changed files with 92 additions and 0 deletions
--- a/internal/engine/secret.go
+++ b/internal/engine/secret.go
@@ -92,6 +92,9 @@ func classifySecretPathsWithEvidence(schema *schemaDescriptor, predicate func(Pa
 			if target, matched := model.resolutionPayload.correspondence.finalPath(path); matched {
 				projected[target.String()] = target
 			}
+			if prior, matched := model.resolutionPayload.correspondence.entryPath(path); matched {
+				projected[prior.String()] = prior
+			}
 		}
 		for pointer, path := range projected {
 			paths[pointer] = path