Enforce bounded operation guardrails

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a028de-e2c8-7732-8521-46a7fc5db82f

tests/test_run_artifacts.py

@@ -11,6 +11,7 @@ from activity_core.run_artifacts import (
     artifacts_from_ops_result,
     build_forgejo_blob_url,
     match_ops_runs_to_activity_run,
+    public_context_keys,
 )
 
 
@@ -39,6 +40,17 @@ def test_build_forgejo_blob_url_rejects_traversal() -> None:
     )
 
 
+def test_public_context_keys_hide_credential_and_raw_payload_names() -> None:
+    assert public_context_keys(
+        {
+            "safe_summary": {},
+            "credential": "must-drop",
+            "tool_output": "must-drop",
+            "provider_response": {},
+        }
+    ) == ["safe_summary"]
+
+
 def test_artifacts_from_ops_result() -> None:
     arts = artifacts_from_ops_result(
         {