# Heuristic Inbox Strict Redaction Review Source

## Status

- Date: 2026-05-19
- Source: Follow-up review of the current `heuristic-inbox 0.10.2` behavior
  against agent-kit HEURISTIC_SYSTEM docs and retained cases.
- Recommended plan: docs/plans/heuristic-inbox-strict-redaction/heuristic-inbox-strict-redaction-plan.md
- Recommended execution state: docs/plans/heuristic-inbox-strict-redaction/heuristic-inbox-strict-redaction-execution-state.md

## Purpose

Align agent-kit with the released `heuristic-inbox 0.10.2` strict body
redaction behavior. The previous review record correctly identified the body
redaction gap when `heuristic-inbox 0.10.1` was installed, but the upstream
primitive has since shipped warning and strict enforcement for absolute
`$HOME` paths in `ENTRY.md` and `RECORD.md` body text.

## Findings

### R1: Body-Level Redaction Is Now Enforced By The Primitive

- Confirmed fact: `heuristic-inbox --version` reports `0.10.2`.
- Confirmed fact: `heuristic-inbox verify <case> --format json` reports
  body-level absolute `$HOME` path warnings while preserving non-strict
  compatibility.
- Confirmed fact: `heuristic-inbox verify <case> --strict --format json`
  escalates body-level absolute `$HOME` paths into violations and exits
  non-zero.
- Required fix: update HEURISTIC_SYSTEM docs and tests so they describe
  warning-by-default plus strict enforcement instead of saying body text is
  unscanned.

### R2: Retained Historical Cases Need Strict-Clean Body Paths

- Confirmed fact: the archived GitLab MR inbox case and the GitHub PR required
  check operation record both still contained absolute local home paths in
  retained body text.
- Required fix: rewrite retained raw-record body paths to `<workspace>/...` so
  both cases pass strict verification while preserving the audit pointer shape.

### R3: agent-kit Must Pin The Minimum nils-cli Version That Provides Strict Redaction

- Confirmed fact: `nils-cli >= 0.10.1` is sufficient for `heuristic-inbox`
  basic operations and auto-log smoke tests, but not for strict body redaction.
- Required fix: bump the agent-kit minimum to `nils-cli >= 0.10.2`, update the
  `heuristic-error-inbox` skill release boundary, and add focused test coverage
  for the strict body redaction behavior.

## Non-Scope

- Do not resolve the historical PR #264 bookkeeping note (`R6`) in the older
  follow-up review.
- Do not standardize or archive `docs/improvements/` in this change. Future
  implementation work should use a plan bundle under `docs/plans/<slug>/`.

## Acceptance Criteria

- Current HEURISTIC_SYSTEM docs describe `heuristic-inbox 0.10.2` body scanning,
  non-strict warnings, and `--strict` enforcement.
- Retained inbox and operation-record cases contain `<workspace>` placeholders
  instead of absolute local home paths.
- `DEVELOPMENT.md` and the `heuristic-error-inbox` skill require
  `nils-cli >= 0.10.2`.
- Focused heuristic tests cover the updated docs and strict redaction behavior.
- `scripts/check.sh --all` passes.
