docs/tools/HOWTO-PRIVACY-GUARDIAN.md
Standard: DSOM For My AI Protocol v6.1 | Secret Management Tools:privacy-guardian.ps1,privacy-guardian.sh,playbooks/dsom/privacy-scan.ymlPlatforms: Windows Native (T1), Linux/WSL2 (T2)
1. Purpose
privacy-guardian is the Security Sentinel of the DSOM ecosystem. Before any context manifest is shared with an external LLM (Gemini, Claude, GPT), this tool scans the file for common sensitive data patterns to prevent accidental data leaks or credential exposure.
Use it to detect:
- Network Leaks: Plaintext IPv4 addresses.
- Identity Leaks: Email addresses and local user home paths (e.g.,
C:\Users\Admin). - Cloud Secrets: AWS Access Keys, Google API Keys, GitHub Tokens, OpenAI Secrets, Slack Tokens.
- Cryption Leaks: PEM-formatted Private Keys.
tools/privacy-guardian.ps1(Windows)tools/privacy-guardian.sh(Linux/WSL2)playbooks/dsom/privacy-scan.yml(Ansible)
2. Prerequisites
3. Usage
3.1 Standard Scanning
3.2 Ansible Sweep
4. Scan Patterns
The tool utilizes a library of high-fidelity regex patterns:5. Reading the Output & Status Codes
6. Security Advisory
[!IMPORTANT] This tool is a Heuristic Scanner. It detects patterns, not every possible secret.
- Always perform a quick manual scroll-through of your manifest before uploading.
- Never upload raw
.envfiles orvault/secrets.ymlto an external AI chat.- Utilize the Atomic Git Hygiene rule to ensure secrets never even enter your git history.
7. Related Documents
Standard: DSOM For My AI Protocol v6.1 | Harisfazillah Jamel | LinuxMalaysia Document Version: v1.0 | Created: 2026-04-08
Deep State of Mind (DSOM) For My AI Protocol | Harisfazillah Jamel (LinuxMalaysia) | 2026-07-04 Standard: UK English | DBP-standard Bahasa Melayu Malaysia (Piawai) | GNU General Public License v3.0