dsh-tacit 0.4.0 → 0.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -80,7 +80,9 @@ Tacit never sees your API key (every call goes through the harness's own model
80
80
  service), only calls the allowlisted official models over your session's own
81
81
  provider route, keeps reports and directives in `~/.dsh/storages/tacit/`, refuses
82
82
  cross-site requests to its own routes, and never deletes anything but its own
83
- reports and expired usage files. Dollar figures are estimates at list price; a cost plugin such as
83
+ reports and expired usage files. Credential-shaped strings in what it captures
84
+ API keys, tokens, JWTs, private-key blocks — are masked before anything is
85
+ stored or sent. Dollar figures are estimates at list price; a cost plugin such as
84
86
  `dsh-cost-meter` shows the real number. The full data-flow and cost tables, and
85
87
  the honest list of limitations:
86
88
  [Privacy, cost & limitations](https://github.com/hackernotfound/dsh-tacit/blob/main/docs/privacy-and-cost.md).