From 1ed7877f595dc449fd9d10fc9b82cab242129e30 Mon Sep 17 00:00:00 2001 From: garrytan Date: Sun, 1 Nov 2026 14:57:44 +0000 Subject: [PATCH] docs(pregate): untracked and oversized Python/Dart files in the secrets stage (GST-738 re-audit) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> --- docs/pregate.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/docs/pregate.md b/docs/pregate.md index 5080c7a9d..78e6c7365 100644 --- a/docs/pregate.md +++ b/docs/pregate.md @@ -182,9 +182,10 @@ Two stages with separate clocks, both printed: changed Python (`.py`, `.pyi`) or Dart file is scanned whole and only findings on its added lines count, so a line added inside an existing `"""` or `'''` string is still read as a literal; its rows give the file's - line number (`app.py, line 10`). The whole text is the version git diffed - (a full-context `git diff`), never the working copy; a file whose full diff - does not parse is scanned on its added lines alone, without that context. + line number (`app.py, line 10`). A tracked file's whole text is the version + git diffed (a full-context `git diff`), never the working copy; an untracked + file is read whole from disk. A file over the size limit, or whose full diff + does not parse, is scanned on its added lines alone, without that context. - `strays`: a new file at the repository root, a new top-level directory, or a scratch name (`zz-*`, `tmp*`, `scratch*`) anywhere. - `literals`: for every changed exported constant or named timeout/retry