Make AI-Safe Copy

Create deterministic copies under .ai-safe/ before reading file content into the model context. Report what was detected without printing detected values.

Non-negotiable boundary

• Do not read, summarize, grep, print, or otherwise place the original file contents into model context before sanitization.
• Use only paths the user supplied or clearly placed in scope.
• Never pass original contents as a command-line argument.
• Keep .ai-safe/report.json free of detected values and replacement mappings.
• Never read, print, summarize, or share .ai-safe/private/mapping.json. It contains the original values and exists only for the local restore command.
• Never read or place a restored output into model context. Restoration is the final local handoff back to the user.
• Treat the output as risk reduction, not guaranteed anonymization or compliance. Ask the user to review it before external sharing.