keynv-labs/keynv

keynv is a local, runtime protection tool that prevents secrets from leaking into text surfaces (shell history, AI-agent transcripts, terminal output, CI logs) on developer machines. Intended for developers and teams using AI coding assistants and standard secret managers, it complements vaults rather than replacing them. Key features: alias-first resolution (use @project.env.key aliases; keynv exec resolves values inside a privileged subprocess so agents/processes can't read them), real-time scrubbing and file rewrites with atomic backups, a watcher for live AI session logs, shell-history hooks to prevent leaks, a doctor/scrub lifecycle for discovery and remediation, RBAC and audit trails, and a self-hostable vault with CLI/GUI and standalone binaries.

AI-related keywords found in this repo's description, topics, or README summary — grouped by category. Each badge links to the corresponding ranking detail page.