CLI and workspace hygiene · Lesson 3 of 12 · 7 min

Inspect redacted environment data

Redacted configuration proves which keys are present without revealing their values. A redaction marker is not a credential and should not be pasted into an authentication request.

Open the lab Course map

Mastery 0/3Run itExplain itApply it

learner@clairos:~ $

↑ history · Tab complete · Ctrl+C cancel · Esc, Tab to leaveExit 0

Your objectives

Hints are always available. Wrong turns never cost XP.

1
Read the case evidence
Read /opt/ai-lab/cases/aiops-cli-workspace-003.json. Separate the recorded facts from your assumptions.
Hint & worked example
Redacted configuration proves which keys are present without revealing their values. A redaction marker is not a credential and should not be pasted into an authentication request.
The complete case JSON is read successfully.
```
cat /opt/ai-lab/cases/aiops-cli-workspace-003.json
```
Common mistake to avoid: Use [REDACTED] as a real API credential.
2
Isolate the deciding signal
Select the API_TOKEN field from the case JSON. What does it establish—and what does it not establish?
Hint & worked example
Keep the token redacted; the marker only tells you that a secret field exists.
A successful JSON query isolates API_TOKEN.
```
jq .API_TOKEN /opt/ai-lab/cases/aiops-cli-workspace-003.json
```
Common mistake to avoid: Using a different case or an unrelated signal as the justification.
3
Record your operational decision
Choose the justified code: keep-redacted, change-without-evidence, or ignore-the-signal. Save that one code followed by a newline in /home/learner/lab/aiops-cli-workspace-003-decision.txt.
Hint & worked example
Keep the token redacted; the marker only tells you that a secret field exists.
The decision artifact contains the correct code, not just a matching command in history.
```
printf '%s\n' 'keep-redacted' > /home/learner/lab/aiops-cli-workspace-003-decision.txt
```
Common mistake to avoid: Use [REDACTED] as a real API credential.

Understand the pattern

Redacted configuration proves which keys are present without revealing their values. A redaction marker is not a credential and should not be pasted into an authentication request.

Interpret the evidence

Keep the token redacted; the marker only tells you that a secret field exists.

A tempting mistake

Use [REDACTED] as a real API credential.

All names, measurements, prices, versions, and thresholds in this exercise are fictional training data. The evidence supports this bounded scenario, not a claim about a live provider.

Worked example and expected result

$ cat /opt/ai-lab/cases/aiops-cli-workspace-003.json

{
  "fixture": "Fictional training data; not a live measurement.",
  "API_TOKEN": "[REDACTED]",
  "MODEL_ID": "assistant-stable",
  "safe_to_publish": [
    "MODEL_ID"
  ]
}

Exit status: 0. The command completed successfully in the training fixture.

$ jq .API_TOKEN /opt/ai-lab/cases/aiops-cli-workspace-003.json

"[REDACTED]"

Exit status: 0. The command completed successfully in the training fixture.

$ printf '%s\n' 'keep-redacted' > /home/learner/lab/aiops-cli-workspace-003-decision.txt

(no output; exit 0)

Exit status: 0. The command completed successfully in the training fixture.

Try a variation

Name the assumption that would have to change for “keep-redacted” to stop being the justified action. Do not silently replace missing evidence with a guess.

Explain it

What does the evidence in “Inspect redacted environment data” justify?Keep the token redacted; the marker only tells you that a secret field exists.Use [REDACTED] as a real API credential.Make the change now and gather the missing evidence afterward.

Apply it elsewhere

A colleague concludes: “Use [REDACTED] as a real API credential.” What should you do?Accept it because the training command completed.Treat this fixture as a live measurement.Reject that conclusion; return to the case evidence and its stated limits.

Keep the momentum.

Complete the lab, then explain and apply the pattern.

Next: Protect local configuration Try an incident drill

Anonymous lesson and mastery progress lasts for this session. Sign in to keep synced lesson XP between sessions; mastery stays device-local. No speed bonus, lost lives, or hint penalties.

Keep learning

Case methodology: evidence, limits, decision