CI's first capture differed from the local one only in temporary paths, the suite's SSH key, comment ids and the order of requests gh sends at once; each is now a placeholder or sorted. Every field named like a secret is redacted whatever its type, credentials in URLs are too, and a captured GraphQL request without a query fails the check instead of being skipped.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>