## Purpose

## Research or security rationale

## Changes

## Verification

- [ ] Added positive and negative tests
- [ ] Ran `python -m unittest discover -s tests -v`
- [ ] Confirmed reports do not expose matched secrets
- [ ] Updated documentation and known limitations
- [ ] Preserved local-only, no-execution defaults

## Security and privacy impact

## Related issue