diff --git a/bounded-executor/exercise_approval_identity.py b/bounded-executor/exercise_approval_identity.py
index ab5226c..e59df12 100644
--- a/bounded-executor/exercise_approval_identity.py
+++ b/bounded-executor/exercise_approval_identity.py
@@ -145,7 +145,7 @@ def exercise(args) -> dict:
         "target": "disposable local processes; synthetic keys and credentials",
         "started_at": dt.datetime.now(dt.UTC).isoformat(timespec="seconds"),
         "keycape_image": KEYCAPE_IMAGE,
-        "keycape_contract_commit": commit(args.keycape_source),
+        "issuer_contract_commit": commit(args.keycape_source),  # key-cape; a "key*" name trips the secret scanner
         "approval_engine_commit": commit(args.approval_engine_source),
         "net_kingdom_commit": commit(REPO),
         "executor_source_sha256": {n: hashlib.sha256((HERE / n).read_bytes()).hexdigest() for n in UNDER_TEST},