# v2.1.0-alpha.1 — Redact before handoff

Second v2.1 "secret safety" item: stop secrets from reaching the next agent.

## Added

- **Redaction Gate.** `buildHandoff()` scans the generated handoff — the exact
  text the next agent reads — with `RedactionScanner`. `run` and `handoff` then
  block launching the next agent when there are **high-severity** findings
  (secrets, API keys, private keys) unless `--force`. Medium findings (absolute
  home paths, oversized content) are warnings only.

## Why

Redaction previously ran only when exporting a handoff *bundle*. Now it also runs
on the live continuation path, so a leaked key in the repo state can't be handed
to the fallback agent silently.

## Notes

- Deterministic, no model calls. The handoff file is still written; the gate
  governs whether the next agent is launched.

## Next in v2.1

- Secret-leak regression scan + `--allow-api-key-env` audit event.