From 8c6a1343cc98ae160555a3f153b36505d463e8a2 Mon Sep 17 00:00:00 2001
From: Peter Alexander <pja@anthropic.com>
Date: Thu, 30 Apr 2026 23:11:37 +0100
Subject: [PATCH] Redact example secret to avoid triggering secret scanners

---
 docs/design-sketch-proposal.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/design-sketch-proposal.md b/docs/design-sketch-proposal.md
index 20974c0..d3d7543 100644
--- a/docs/design-sketch-proposal.md
+++ b/docs/design-sketch-proposal.md
@@ -325,7 +325,7 @@ Unlike poll and push, webhook delivery requires an explicit subscribe step becau
     "delivery": {
       "mode": "webhook",
       "url": "https://proxy.example.com/hooks/client123",
-      "secret": "whsec_NWNmOGE3YjJkNGU2ZjgwMTIzNDU2Nzg5YWJjZGVmMDE"
+      "secret": "whsec_<base64-of-24-to-64-random-bytes>"
     },
     "cursor": null,
     "maxAge": 300