ConnectOnionConnectOnion 1.9.2b29 (beta)
Install this preview
Stable remains 1.9.1. Install this opt-in beta by exact pin:
python -m pip install --upgrade 'connectonion==1.9.2b29'
Read by your own agent
- Private sentences are taken out before you see the preview. Your own
coding agent reads every sentence that would go: yours, the AI's whole replies
(not only the part the page quotes), and the report on top. Each sentence about
someone's health, family, personal travel or home, money, visa or legal
matters, or a third party's private details is replaced with
[removed: <why>], in the page and in the session copy. It removes when unsure. The preview says how many went and from which messages;--editputs any back. - On your plan, not ours. A Codex session is read by Codex and a Claude Code session by Claude Code, each in an empty folder with nothing it may change or run. The other one is used if that one is not installed, and ConnectOnion's default model only if neither is.
- Names no rule caught are masked. The same pass lists people's names, and
they become
[person]. A nickname in a co rem title ("Mei-Ling Wu (Mimi)") is masked too. - The preview says when the session read your mail or co rem pages. Every private detail that leaked on 2026-10-14 came from an AI reply quoting one of them.
- What one pass misses, the next catches. When a place or a name is in two or more removed sentences, a kept sentence that names it too is removed: an example quoting a real trip in a design discussion went that way.
- Fewer false alarms. "Diagnosis" is flagged only beside a health word, and one message reads "Message 35 mentions …".
Verification and limits
- Each change has a test that failed first, on synthetic sentences only; the handoff tests pass.
- Measured on two real sessions, locally, before release:
- an 80-message session to be handed to a student team, three independent
runs: each time all 12 private details we had listed by hand (health,
family, travel, money, visas) were gone from the page and the copy, and the
4 technical threads it must keep were all there, with 52 to 60 sentences
removed. A few of those were work, not private: put them back with
--edit; - a 173-message session to a colleague: none of its private details were left; what remained were categories named in a design ("health, visa, family").
- an 80-message session to be handed to a student team, three independent
runs: each time all 12 private details we had listed by hand (health,
family, travel, money, visas) were gone from the page and the copy, and the
4 technical threads it must keep were all there, with 52 to 60 sentences
removed. A few of those were work, not private: put them back with
- A model decides what is private, so it can miss a sentence or remove one you wanted. Read the preview; it lists every message it changed.
- Reading a long session takes a few minutes.
- The install floor stays 1.9.2b27.