... reads your deploy token. Neither file is a finding on its own. Together they're a stranger's pull request opening a path to your secrets. Tracing that by hand across a dozen workflows is exactly the kind of tedium nobody actually does, so 0.28.0 does it. The finding now names both halves: the trigger, and the workflow an outsider arrives through you never get told a workflow_call file is fork-triggered without being shown how. Two more things ...

... Ludwinowski(@anna_ludwinowski): @picspace  "What changed for the user" instead of "what did I build" is exactly the right swap! It's the same trap in enterprise IT and in most launches here, just dressed differently (feature list vs. demo). Since you mentioned the sentence changes as you learn: do you have an example of how yours shifted for picspace? Like what the early version of the problem sentence was, versus

... personal knowledge management (PKM) or, more poetically, "tools for thought". Roam Research led the charge on this wave of products. I think they were just missing LLMs as the connective tissue that saves us from the tedium of manually updating a digital representation of everything we know & care about. Muse comes to mind as one "too early" product that could've really benefited from LLMs. The founder wrote a great retrospective. Magic Leap -- anyone remember the whale demo? Pebble ...