Rampart

A browser extension for when you paste a secret into a box that absolutely did not ask for it.

The actual design problem

You pasted a key into the wrong box. Now what?

Finding the key is easy enough. The annoying bit is stopping you without eating the rest of the message, hiding where it was going, or making every false positive feel like a reason to uninstall the extension.

What you chooseClicksWhat Rampart does

Redact and continue1

Swap the key for [REDACTED]. Keep the rest of the draft.

Keep editing1

Close Rampart and put the cursor back where it was.

Trust this site2

This changes future behaviour, so it gets an explanation first.

Send it anyway2

Allow it once. No sneaky permanent opt-out attached.

↻⌕R

Message

Can you check this integration?

API_KEY=sk-demo_not-a-real-secret_4f91

What goes where

The secret has no business
leaving the page.

Seen for a split secondClipboard textForm contentsThe detected valueNever uploaded

Remembered on this browserThe websiteWhat kind of key it wasCount + timeNot the key. Not even a fragment.

Synced if you sign inYour settingsSites you trustYour profileThat is it.

Next projectIndependent verification for agent-written codeVerik↗