Evidence record / opencode
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-10-24-opencode-sanitized-exports-and-database-errors-lose-additional-hidden-data
Sanitized exports and database errors lose additional hidden data. Database query-error parameters are redacted, first v2.0.30. Completed compaction replay context is omitted from sanitized exports, first v2.0.31. The latter prevents hidden replay payloads surviving sanitization of visible summary text. At v2.1.4 the sanitizer handles native compaction data.
Channel: tagged-release. Half: defect. Date: 2026-10-16.
Operator consequence: Regenerate sanitized support exports on the fixed version and inspect the actual export/error path before treating it as safe to share. This is a concrete data-disclosure repair, not a claim that every diagnostic artifact is secret-free. It belongs beside the sharing and credential discussion.
Receipt
Finding metadata
Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0
Finding ID: 2026-10-24-opencode-sanitized-exports-and-database-errors-lose-additional-hidden-data
Source links
Primary links, including exact changelog lines when available.
- commit2026-10-24-opencode-sanitized-exports-and-database-errors-lose-additional-hidden-datagithub.com/anomalyco/opencode/commit/a8fc567c5c2a0af0b6069e6b87293d2d420cd668commit2026-10-24-opencode-sanitized-exports-and-database-errors-lose-additional-hidden-datagithub.com/anomalyco/opencode/commit/706a688994c2343243615b0bd38083fc8fe69671tagged commit file2026-10-24-opencode-sanitized-exports-and-database-errors-lose-additional-hidden-dataanomalyco/opencode / packages/core/src/session/transfer.ts
Versioned source: run artifact