PASS exit=0 (want 0)  clean staged files
PASS exit=2 (want 2)  staged AWS key
      Secrets Guard blocked this commit. Possible secrets found:|  aws.js: AWS access key ID (AKIATE…)|Move them to env vars (and .gitignore your .env), then retry. If this is a false positive, add a `secrets-allow` comment on that line.|
PASS exit=2 (want 2)  staged GitHub token
      Secrets Guard blocked this commit. Possible secrets found:|  ci.yml: GitHub token (ghp_a1…)|Move them to env vars (and .gitignore your .env), then retry. If this is a false positive, add a `secrets-allow` comment on that line.|
PASS exit=2 (want 2)  untracked OpenAI key + 'git add . && git commit'
      Secrets Guard blocked this commit. Possible secrets found:|  bot.py: OpenAI API key (sk-pro…)|Move them to env vars (and .gitignore your .env), then retry. If this is a false positive, add a `secrets-allow` comment on that line.|
PASS exit=2 (want 2)  tracked edit w/ Stripe key + 'git commit -am'
      Secrets Guard blocked this commit. Possible secrets found:|  a.txt: Stripe live key (sk_liv…)|Move them to env vars (and .gitignore your .env), then retry. If this is a false positive, add a `secrets-allow` comment on that line.|
PASS exit=2 (want 2)  staged .env file
      Secrets Guard blocked this commit. Possible secrets found:|  .env: env file should not be committed|Move them to env vars (and .gitignore your .env), then retry. If this is a false positive, add a `secrets-allow` comment on that line.|
PASS exit=2 (want 2)  staged private key
      Secrets Guard blocked this commit. Possible secrets found:|  id_rsa: Private key (-----B…)|Move them to env vars (and .gitignore your .env), then retry. If this is a false positive, add a `secrets-allow` comment on that line.|
PASS exit=0 (want 0)  placeholder value (should pass)
PASS exit=0 (want 0)  allowlisted line (secrets-allow)
PASS exit=0 (want 0)  non-commit git cmd (git status) ignored
PASS exit=2 (want 2)  Write secret into src file
      Secrets Guard blocked Write to /p/src/a.ts: Stripe live key (sk_liv…). Read the value from an env var instead (and add the name to .env.example).|
PASS exit=0 (want 0)  Write secret into .env (allowed)
PASS exit=0 (want 0)  Edit clean code
PASS exit=0 (want 0)  garbage stdin (fail open)
PASS exit=0 (want 0)  outside a git repo
RESULT: 15 passed, 0 failed
