Veil: a local-first redaction gate for text pasted into AI

A developer released Veil, a local-first tool that detects and replaces secrets and sensitive data before text reaches an AI chat. It combines 18 deterministic rules, entropy scanning and an open-weight Gemma model whose quotes are verified character by character. It is MIT-licensed with zero dependencies, plus a CLI, a local web UI on 127.0.0.1:4317 and a Node library.

• 18 rules catch AWS keys, tokens, JWTs, PEM blocks, URL passwords and card numbers
• Gemma only suggests spans; every quote is checked against the source text
• The CLI works as a gate: git diff | veil redact --model > safe.diff
• MIT-licensed, zero runtime dependencies, model swappable via VEIL_MODEL