Someone

PR Diff Sentinel is a merge gate for secrets that survive a delete — a problem that got worse with vibe coding. People remove a key from a file, open a PR, and assume they’re safe. Diff-only scanners miss git history; CI goes green; the merge still ships the leak. Rules decide Pass/Fail over the working tree, the PR diff, and the commits behind it. The gate stays red until a human rotates the credential. Meta models (required): • Muse Spark labels each masked hit (likely live vs docs sample / fixture). • Muse Wonder writes rotate steps, blast radius, and triage — and powers live report chat. • Muse explains only. Muse cannot clear a Fail. Built during the hackathon: hosted scanner + Testing demos + full Muse report (PDF, chat), Chrome extension (PR/commit scan, repo picker, local dashboard), CLI + pre-commit/pre-push hooks + GitHub Action, and AI-authorship advisories that never block the secrets gate. Not an AI code reviewer. Rules block. Muse explains. Secrets stay masked.