fix(security): remove persisted Claude raw stream log
From the PR description
Summary
- remove the unconditional
claude-raw-stream.logplaintext file write - gate raw Claude stream event console logging behind
DEBUG_LLM_STREAM=true
Why
Raw Claude stream events can contain user prompts, document context, and assistant output. Persisting every event to an unbounded plaintext log creates an unnecessary confidentiality and retention risk for legal-document workflows.
This keeps an explicit opt-in debug path without writing privileged material to disk by default.
Closes #9.
Test
npm run build --prefix backend
Our analysis
Stop writing raw Claude stream events to disk by default — read the full analysis →
Think the analysis missed something the PR description covers?
Commits in this PR (1)
| SHA | Subject | Author | Date | |
|---|---|---|---|---|
95cf296f | fix claude raw stream logging | Eli Fayerman | 2026-05-04 | ↗ GitHub |
Capture this PR into my fork
Download a Markdown prompt that tells Claude how to port every
commit in this PR into your working tree. Run it via
claude -p < capture-pull-29.md from
inside the repo you want the changes in.