pii-scout

PII Scout — find what must not ship, before it ships.

Point it at a folder. It reports secrets, forbidden artefact classes, and any names you injected — with file and count, never the matched value.

Built for the moment before you publish something. That moment is where leaks actually happen: not because anyone was careless, but because a tree accumulated an archived copy, a captured session, a vendored fork of something already fixed — and nobody re-read it, because nobody re-reads 40,000 files.

DESIGN RULES, all of them learned the hard way

• Unconfigured is a REFUSAL, not a pass. A scanner with an empty roster reports "clean" precisely when it is checking nothing, and that reading is trusted because it looks like every other clean result.
• Findings name the file and the count. Never the value. A leak report that quotes the secret is a second copy of the leak.
• Whole artefact CLASSES are refused by shape, not just by content. A captured browser session carries identities, tenant GUIDs and key material that look nothing like a token; you cannot pattern-match what you did not know to look for, but you can refuse the file class that carries it.
• Short ALL-CAPS terms match on word boundaries. An acronym that fires inside unrelated words produces noise, and noise is how a gate gets switched off.
• Long base64 runs are skipped for IDENTITY matching only. Random base64 contains short names by chance; reporting that as PII trains people to ignore real findings. Secrets are still matched everywhere, including blobs.

Parameters

The typed contract this capability answers to (JSON Schema — the deterministic layer):

{
  "type": "object",
  "properties": {
    "path": {
      "type": "string",
      "description": "Folder to scan. Defaults to the current directory."
    },
    "terms": {
      "type": "string",
      "description": "Comma-separated names that must not appear (customers, internal codenames, your own handle)."
    },
    "max_findings": {
      "type": "integer",
      "description": "Cap the findings returned. Default 100."
    }
  },
  "required": []
}