Admin
Custom sensitive-path rules
Operator-defined patterns layered on top of the built-in matcher. Applied at session review time — rules you add now flag matches in sessions already in the store.
No custom rules yet
Add a pattern above to extend the built-in matcher. Built-in path patterns (.env, .aws, .ssh, credentials, id_rsa, ...) and host patterns (pastebin.com, transfer.sh, file.io, ...) are always on and don't need to be re-added here.