diff --git a/run.json b/run.json
index 23919d655..771e253cd 100644
--- a/run.json
+++ b/run.json
@@ -505,7 +505,7 @@
     "kind": "running"
   },
   "status_updated_at": "2026-07-11T20:41:56.850021720Z",
-  "last_event_at": "2026-07-11T20:57:16.848858155Z",
+  "last_event_at": "2026-07-11T20:57:20.642967929Z",
   "pending_control": null,
   "checkpoints": [
     {
@@ -904,9 +904,9 @@
       }
     },
     {
-      "seq": 0,
+      "seq": 328,
       "checkpoint": {
-        "timestamp": "2026-07-11T20:57:16.894411069Z",
+        "timestamp": "2026-07-11T20:57:20.307656879Z",
         "current_node": "simplify_fable",
         "completed_nodes": [
           "start",
@@ -917,21 +917,190 @@
           "simplify_fable"
         ],
         "node_retries": {},
+        "context_values": {
+          "internal.fidelity": "compact",
+          "graph.goal": "# Remove the unused per-run secret registry (`SecretRedactor`) and stale references to it\n\n**Self-contained implementation plan.** Everything needed to implement this is\nin this file plus the repository. Independent — no preconditions; can land\nanytime.\n\n> **Token notation.** Interpolation tokens are written in this file without\n> their enclosing double curly braces, so the file is safe to pass directly as\n> a workflow goal (the goal templater would otherwise try to expand them).\n> Read `env.NAME`, `secrets.NAME` as the double-curly-brace token form used in\n> the codebase.\n\n## Context and goal\n\nFabro redacts secrets from run output using **content-based** detection:\nentropy analysis plus gitleaks-style credential patterns\n(`fabro_redact::redact_string` / `redact_json_value`), applied where events are\nserialized and where exec-output tails are captured.\n\nA second mechanism was staged but never adopted: `SecretRedactor`, a per-run\nregistry of exact secret values, intended to be populated when declared\nsecrets resolve at the run boundary and then substituted out of run output\n(catching low-entropy secret values that content-based detection cannot). The\ntype landed as infrastructure ahead of its wiring; the wiring PR was\nultimately **not merged** — the team decided the registration approach was too\nmuch plumbing for too little benefit over the existing content-based\nredaction, and content-based redaction is now the settled mechanism.\n\nThat leaves dead code and two stale forward references on main:\n\n- `SecretRedactor` has **zero consumers** outside its own crate — nothing\n  constructs, registers into, or applies it anywhere in the workspace.\n- A doc comment in `fabro-auth` says provider-header secret resolution sits\n  outside the registry \"until exact-match registration is threaded through\" —\n  a follow-up that will never happen.\n- The `InterpString` module doc in `fabro-types` says declared-secret values\n  \"are intended to be registered into a per-run exact-value redactor\" —\n  describing the abandoned design as if it were pending.\n\n**Goal:** delete the dead type and rewrite both stale comments so the code\ndescribes the real architecture (content-based redaction only). Pure\ndeletion/documentation PR — no behavior change.\n\n## Verified current state (as of main `9daca83b3`, 2026-07-09 — re-verify before starting; line numbers are anchors, not gospel)\n\n- `lib/crates/fabro-redact/src/secret_registry.rs` — the whole module\n  (~217 lines: `SecretRedactor` with `register`, `is_empty`, redaction\n  methods, and its unit tests). Uses `crate::Region`, which is **shared** with\n  `entropy.rs` and `gitleaks.rs` and must stay.\n- `lib/crates/fabro-redact/src/lib.rs:11` — `mod secret_registry;` and `:15`\n  `pub use secret_registry::SecretRedactor;`.\n- Workspace-wide grep for `SecretRedactor` outside `fabro-redact` returns\n  nothing (no consumers in `lib/`, `apps/`, or `docs/`). If this grep finds a\n  consumer when you run it, **stop** — the premise of this plan no longer\n  holds; state that instead of deleting.\n- `lib/crates/fabro-auth/src/resolve.rs:479-482` — doc comment on\n  `resolve_extra_headers`:\n  \"Provider header secrets resolve outside the run-boundary redactor\n  registration path. Keep this path free of value logging until exact-match\n  registration is threaded through.\"\n- `lib/crates/fabro-types/src/settings/interp.rs:17-19` — module doc sentence:\n  \"Declared-secret values are intended to be registered into a per-run\n  exact-value redactor where secrets resolve; sensitivity is not tracked on\n  resolved strings.\"\n\n## Implementation\n\n1. **Delete the module**: remove\n   `lib/crates/fabro-redact/src/secret_registry.rs`, the `mod secret_registry;`\n   declaration, and the `pub use secret_registry::SecretRedactor;` re-export\n   from `lib.rs`. Leave `Region`, `redact_string`, `redact_json_value`,\n   `DisplaySafeUrl`, and everything else in the crate untouched.\n2. **Rewrite the `fabro-auth` comment** on `resolve_extra_headers`: keep the\n   operative guidance (never log resolved header values — they may contain\n   secrets), drop the promise of future exact-match registration. Suggested\n   shape: \"Resolved header values may contain secrets; keep this path free of\n   value logging. Content-based redaction covers credential-shaped values on\n   output surfaces, but nothing substitutes these exact values.\"\n3. **Rewrite the `interp.rs` module-doc sentence**: state the real\n   architecture — resolved secret values are plain strings; sensitivity is not\n   tracked on resolved strings; redaction of run output is content-based\n   (entropy + credential patterns), applied where output is serialized. Do not\n   reference a registry or any pending mechanism.\n4. **Sweep for stragglers**: `rg -n \"SecretRedactor|secret_registry|exact-match|exact-value\" lib/ docs/internal/`\n   — any remaining hit that describes per-run exact-value redaction as\n   existing or planned must be removed or rewritten in this PR. (Expected\n   after steps 1–3: no hits.)\n\n## Scope boundaries — deliberately NOT in this PR\n\n- **Content-based redaction** (`redact_string`, `redact_json_value`, the\n  entropy/gitleaks finders, `Region`) — untouched. This PR removes the unused\n  second mechanism, not the working first one.\n- **Where content-based redaction is applied** (event serialization,\n  exec-output tails, server read paths) — no changes to any application site;\n  this PR does not move, add, or remove redaction passes.\n- **`DisplaySafeUrl` and redacting `Debug` impls** — untouched; unrelated\n  pattern.\n- **The live command-output log path** — has no redaction today; a separate\n  planned change addresses it. Do not touch it here.\n- **`fabro-hooks`** — untouched.\n\nIf work outside these boundaries seems genuinely required for this PR to\ncompile or pass its tests, stop and state that in the PR description rather\nthan expanding scope.\n\n## Tests\n\n- No new tests: the deleted module's tests go with it; no behavior changes to\n  test. Existing `fabro-redact` tests (entropy, gitleaks, jsonl, safe-url)\n  must pass unchanged.\n- `cargo build --workspace` proves no hidden consumer existed.\n\n## Acceptance / verification\n\n- `cargo +nightly-2026-04-14 fmt --check --all`\n- `cargo +nightly-2026-04-14 clippy --workspace --all-targets -- -D warnings`\n- `cargo nextest run --workspace`\n- The sweep in step 4 returns clean.\n- No OpenAPI/wire change; no TypeScript client regeneration.\n\n## Conventions\n\n- Plain-English commit messages, PR text, and comments — describe what the\n  change does; no internal planning identifiers or plan-file names in\n  anything that ships.\n- PR description must state plainly: the exact-value registry approach was\n  abandoned in favor of the existing content-based redaction; the type was\n  never wired to any consumer; the two rewritten comments previously promised\n  the abandoned mechanism. Known limitation to state honestly: low-entropy\n  declared secret values (e.g. a secret whose value is an ordinary word) are\n  not caught by content-based detection — this is an accepted trade, not a\n  regression introduced here.\n",
+          "internal.retry_count.simplify_fable": 0,
+          "outcome": "succeeded",
+          "response.simplify_fable": "Done. The previous implement stage had failed on an API auth error before doing any work, so I completed the implementation and then ran the three-agent review.\n\n## What was done\n\n**Implementation** (per the plan):\n- Deleted `lib/crates/fabro-redact/src/secret_registry.rs` (217 lines: the never-consumed `SecretRedactor` and its tests), plus the `mod` declaration and `pub use` re-export in `lib.rs`\n- Rewrote the `resolve_extra_headers` doc comment in `lib/crates/fabro-auth/src/resolve.rs:478-483` — keeps the \"never log resolved header values\" guidance, drops the abandoned exact-match-registration promise, and states the residual risk (low-entropy header values aren't caught by content-based detection)\n- Rewrote the `interp.rs` module doc in `lib/crates/fabro-types/src/settings/interp.rs:17-20` to describe the real architecture: resolved secrets are plain strings, redaction is content-based at output-serialization surfaces\n\n**Review findings** (three parallel agents — reuse, quality, efficiency):\n- All three verdicts: clean. Deletion is complete (zero `SecretRedactor` references remain; the `secret_registry` module in `fabro-static` is an unrelated registry of secret env-var *names*); nothing in `fabro-redact` became dead (`Region`, `redact_regions`, `serde_json`, and all deps still have live users); no runtime code paths changed; no dependent crate lost its reason to depend on `fabro-redact`\n- **Fixed** two wording nits from the quality reviewer: clarified the ambiguous \"nothing substitutes these exact values\" phrasing in `resolve.rs`, and removed the \"resolved … resolved\" redundancy in `interp.rs`\n- **Skipped** one finding: `Region` could be `pub(crate)` — pre-existing and the plan explicitly says leave `Region` untouched\n\n**Verification** — all green:\n- `cargo +nightly-2026-04-14 fmt --check --all` ✓\n- `cargo +nightly-2026-04-14 clippy --workspace --all-targets -- -D warnings` ✓\n- `cargo nextest run --workspace` — 6955 passed, 0 failed ✓\n- Straggler sweep clean (only the unrelated `fabro-static` name registry remains)",
+          "thread.preflight_compile.current_node": "preflight_lint",
+          "thread.start.current_node": "toolchain",
+          "internal.retry_count.preflight_lint": 0,
+          "last_response": "Done. The previous implement stage had failed on an API auth error before doing any work, so I completed the implementation and then ran the three-agent review.\n\n## What was done\n\n**Implementation** (",
+          "thread.implement.current_node": "simplify_fable",
+          "current_node": "simplify_fable",
+          "internal.run_id": "01KX9EKZGANW47ANJQSDMMFBBP",
+          "thread.preflight_lint.current_node": "implement",
+          "failure_signature": "",
+          "thread.toolchain.current_node": "preflight_compile",
+          "internal.retry_count.start": 0,
+          "internal.node_visit_count": 1,
+          "internal.retry_count.toolchain": 0,
+          "graph.rankdir": "LR",
+          "internal.retry_count.preflight_compile": 0,
+          "command.output": "blob://sha256/12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126",
+          "failure_class": "",
+          "graph.model_stylesheet": "\n            * { model: claude-opus-4-8; }\n        ",
+          "internal.thread_id": "implement",
+          "internal.retry_count.implement": 0,
+          "internal.work_dir": "/home/daytona/workspace/fabro",
+          "last_stage": "simplify_fable"
+        },
+        "node_outcomes": {
+          "preflight_lint": {
+            "status": "succeeded",
+            "context_updates": {
+              "command.output": "blob://sha256/12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126"
+            },
+            "notes": "Script completed: cargo +nightly-2026-04-14 clippy -q --workspace --all-targets -- -D warnings 2>&1",
+            "usage": null,
+            "timing": {
+              "wall_time_ms": 0,
+              "inference_time_ms": 0,
+              "tool_time_ms": 165593,
+              "active_time_ms": 165593
+            }
+          },
+          "simplify_fable": {
+            "status": "succeeded",
+            "context_updates": {
+              "last_response": "Done. The previous implement stage had failed on an API auth error before doing any work, so I completed the implementation and then ran the three-agent review.\n\n## What was done\n\n**Implementation** (",
+              "response.simplify_fable": "Done. The previous implement stage had failed on an API auth error before doing any work, so I completed the implementation and then ran the three-agent review.\n\n## What was done\n\n**Implementation** (per the plan):\n- Deleted `lib/crates/fabro-redact/src/secret_registry.rs` (217 lines: the never-consumed `SecretRedactor` and its tests), plus the `mod` declaration and `pub use` re-export in `lib.rs`\n- Rewrote the `resolve_extra_headers` doc comment in `lib/crates/fabro-auth/src/resolve.rs:478-483` — keeps the \"never log resolved header values\" guidance, drops the abandoned exact-match-registration promise, and states the residual risk (low-entropy header values aren't caught by content-based detection)\n- Rewrote the `interp.rs` module doc in `lib/crates/fabro-types/src/settings/interp.rs:17-20` to describe the real architecture: resolved secrets are plain strings, redaction is content-based at output-serialization surfaces\n\n**Review findings** (three parallel agents — reuse, quality, efficiency):\n- All three verdicts: clean. Deletion is complete (zero `SecretRedactor` references remain; the `secret_registry` module in `fabro-static` is an unrelated registry of secret env-var *names*); nothing in `fabro-redact` became dead (`Region`, `redact_regions`, `serde_json`, and all deps still have live users); no runtime code paths changed; no dependent crate lost its reason to depend on `fabro-redact`\n- **Fixed** two wording nits from the quality reviewer: clarified the ambiguous \"nothing substitutes these exact values\" phrasing in `resolve.rs`, and removed the \"resolved … resolved\" redundancy in `interp.rs`\n- **Skipped** one finding: `Region` could be `pub(crate)` — pre-existing and the plan explicitly says leave `Region` untouched\n\n**Verification** — all green:\n- `cargo +nightly-2026-04-14 fmt --check --all` ✓\n- `cargo +nightly-2026-04-14 clippy --workspace --all-targets -- -D warnings` ✓\n- `cargo nextest run --workspace` — 6955 passed, 0 failed ✓\n- Straggler sweep clean (only the unrelated `fabro-static` name registry remains)",
+              "last_stage": "simplify_fable"
+            },
+            "notes": "Stage completed: simplify_fable",
+            "usage": {
+              "input": {
+                "usage": {
+                  "model": {
+                    "provider": "anthropic",
+                    "model_id": "claude-fable-5"
+                  },
+                  "tokens": {
+                    "input_tokens": 29702,
+                    "output_tokens": 10578,
+                    "reasoning_tokens": 0,
+                    "cache_read_tokens": 473945,
+                    "cache_write_tokens": 77986
+                  }
+                },
+                "facts": {
+                  "algorithm": "anthropic",
+                  "cache_write_5m_tokens": 77986,
+                  "cache_write_1h_tokens": 0
+                }
+              },
+              "total_usd_micros": 2274690
+            },
+            "files_touched": [
+              "/home/daytona/workspace/fabro/lib/crates/fabro-auth/src/resolve.rs",
+              "/home/daytona/workspace/fabro/lib/crates/fabro-redact/src/lib.rs",
+              "/home/daytona/workspace/fabro/lib/crates/fabro-types/src/settings/interp.rs"
+            ],
+            "timing": {
+              "wall_time_ms": 0,
+              "inference_time_ms": 191710,
+              "tool_time_ms": 392157,
+              "active_time_ms": 583867
+            }
+          },
+          "toolchain": {
+            "status": "succeeded",
+            "context_updates": {
+              "command.output": "blob://sha256/fc14b2ba2d770e5cd3169df7a29525c962adfc4cfa3097b9098c63ebd61a748c"
+            },
+            "notes": "Script completed: command -v cargo >/dev/null || { curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y && sudo ln -sf $HOME/.cargo/bin/* /usr/local/bin/; }; cargo --version 2>&1",
+            "usage": null,
+            "timing": {
+              "wall_time_ms": 0,
+              "inference_time_ms": 0,
+              "tool_time_ms": 1257,
+              "active_time_ms": 1257
+            }
+          },
+          "implement": {
+            "status": "failed",
+            "failure": {
+              "message": "LLM error: Authentication error for openai: Your authentication token has been invalidated. Please try signing in again.",
+              "category": "deterministic",
+              "signature": "api_deterministic|openai|authentication"
+            },
+            "usage": null
+          },
+          "preflight_compile": {
+            "status": "succeeded",
+            "context_updates": {
+              "command.output": "blob://sha256/12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126"
+            },
+            "notes": "Script completed: cargo check -q --workspace 2>&1",
+            "usage": null,
+            "timing": {
+              "wall_time_ms": 0,
+              "inference_time_ms": 0,
+              "tool_time_ms": 154356,
+              "active_time_ms": 154356
+            }
+          },
+          "start": {
+            "status": "succeeded",
+            "usage": null
+          }
+        },
+        "next_node_id": "simplify_gpt",
+        "git_commit_sha": "96568c4e729996c3daf73fd070a60cd5b5c9e259",
+        "loop_failure_signatures": {
+          "implement|deterministic|api_deterministic|openai|authentication": 1
+        },
+        "node_visits": {
+          "preflight_lint": 1,
+          "toolchain": 1,
+          "implement": 1,
+          "preflight_compile": 1,
+          "start": 1,
+          "simplify_fable": 1
+        }
+      },
+      "diff": {
+        "patch": "diff --git a/lib/crates/fabro-auth/src/resolve.rs b/lib/crates/fabro-auth/src/resolve.rs\nindex 9ab194b3f..60a4576b7 100644\n--- a/lib/crates/fabro-auth/src/resolve.rs\n+++ b/lib/crates/fabro-auth/src/resolve.rs\n@@ -477,9 +477,10 @@ impl CredentialResolver {\n \n /// Resolve a provider's `extra_headers` interpolation sources with `ctx`.\n ///\n-/// Provider header secrets resolve outside the run-boundary redactor\n-/// registration path. Keep this path free of value logging until exact-match\n-/// registration is threaded through.\n+/// Resolved header values may contain secrets; keep this path free of value\n+/// logging. Content-based redaction covers credential-shaped values on output\n+/// surfaces, but no mechanism redacts these exact values, so a low-entropy\n+/// header value that does not look like a credential is not caught.\n pub(crate) fn resolve_extra_headers(\n     provider: &ProviderId,\n     headers: &HashMap<String, String>,\ndiff --git a/lib/crates/fabro-redact/src/lib.rs b/lib/crates/fabro-redact/src/lib.rs\nindex dd5da867b..8ed562e53 100644\n--- a/lib/crates/fabro-redact/src/lib.rs\n+++ b/lib/crates/fabro-redact/src/lib.rs\n@@ -8,11 +8,9 @@ mod entropy;\n mod gitleaks;\n mod jsonl;\n mod safe_url;\n-mod secret_registry;\n \n pub use jsonl::{redact_json_value, redact_jsonl_line};\n pub use safe_url::{DisplaySafeUrl, DisplaySafeUrlError};\n-pub use secret_registry::SecretRedactor;\n \n pub(crate) const REDACTION_MARKER: &str = \"REDACTED\";\n \ndiff --git a/lib/crates/fabro-redact/src/secret_registry.rs b/lib/crates/fabro-redact/src/secret_registry.rs\ndeleted file mode 100644\nindex 764eb0fe5..000000000\n--- a/lib/crates/fabro-redact/src/secret_registry.rs\n+++ /dev/null\n@@ -1,217 +0,0 @@\n-use std::sync::{Arc, PoisonError, RwLock, RwLockReadGuard, RwLockWriteGuard};\n-\n-use serde_json::Value;\n-\n-use crate::Region;\n-\n-/// Per-run registry of exact secret values to redact from strings and JSON.\n-///\n-/// This complements the crate's content-based redaction by redacting registered\n-/// values even when they do not look like credentials. Clones share the same\n-/// registry so callers can hand a redactor to another subsystem and continue to\n-/// register values through the original. Registered values are exact substring\n-/// matches and may be low-entropy strings such as environment names.\n-#[derive(Clone, Default)]\n-pub struct SecretRedactor {\n-    values: Arc<RwLock<Vec<String>>>,\n-}\n-\n-impl SecretRedactor {\n-    /// Register a secret value for exact substring redaction.\n-    ///\n-    /// Empty or whitespace-only values are ignored so an accidental empty\n-    /// registration cannot redact every output boundary.\n-    pub fn register(&self, value: impl Into<String>) {\n-        let value = value.into();\n-        if value.trim().is_empty() {\n-            return;\n-        }\n-\n-        let mut values = self.write();\n-        if !values.contains(&value) {\n-            values.push(value);\n-        }\n-    }\n-\n-    /// Return `true` when no secret values have been registered.\n-    pub fn is_empty(&self) -> bool {\n-        self.read().is_empty()\n-    }\n-\n-    /// Redact all registered secret values from `s`.\n-    pub fn redact_into(&self, s: &str) -> String {\n-        let Some(values) = self.values_snapshot() else {\n-            return s.to_string();\n-        };\n-        redact_string_values(s, &values)\n-    }\n-\n-    /// Redact registered secret values from every JSON string value.\n-    ///\n-    /// Object keys and non-string values are left unchanged.\n-    pub fn redact_json(&self, mut value: Value) -> Value {\n-        let Some(values) = self.values_snapshot() else {\n-            return value;\n-        };\n-\n-        redact_json_leaves(&mut value, &values);\n-        value\n-    }\n-\n-    fn read(&self) -> RwLockReadGuard<'_, Vec<String>> {\n-        self.values.read().unwrap_or_else(PoisonError::into_inner)\n-    }\n-\n-    fn write(&self) -> RwLockWriteGuard<'_, Vec<String>> {\n-        self.values.write().unwrap_or_else(PoisonError::into_inner)\n-    }\n-\n-    fn values_snapshot(&self) -> Option<Vec<String>> {\n-        let values = self.read();\n-        if values.is_empty() {\n-            return None;\n-        }\n-        Some(values.clone())\n-    }\n-}\n-\n-fn redact_json_leaves(value: &mut Value, values: &[String]) {\n-    match value {\n-        Value::Object(obj) => {\n-            for child in obj.values_mut() {\n-                redact_json_leaves(child, values);\n-            }\n-        }\n-        Value::Array(arr) => {\n-            for child in arr {\n-                redact_json_leaves(child, values);\n-            }\n-        }\n-        Value::String(text) => {\n-            let redacted = redact_string_values(text, values);\n-            if redacted != *text {\n-                *text = redacted;\n-            }\n-        }\n-        _ => {}\n-    }\n-}\n-\n-/// Collect every match of each registered value and let\n-/// [`crate::redact_regions`] sort and merge overlaps, so a secret that overlaps\n-/// another is fully redacted.\n-///\n-/// Assumes a small number of registered values (bounded by the run's declared\n-/// secrets), so the per-value scan is not optimized further.\n-fn redact_string_values(s: &str, values: &[String]) -> String {\n-    let mut regions = Vec::new();\n-    for value in values {\n-        for (start, _) in s.match_indices(value) {\n-            regions.push(Region {\n-                start,\n-                end: start + value.len(),\n-            });\n-        }\n-    }\n-\n-    if regions.is_empty() {\n-        return s.to_string();\n-    }\n-\n-    crate::redact_regions(s, regions)\n-}\n-\n-#[cfg(test)]\n-mod tests {\n-    use serde_json::json;\n-\n-    use super::SecretRedactor;\n-\n-    #[test]\n-    fn redacts_registered_low_entropy_value() {\n-        let redactor = SecretRedactor::default();\n-        redactor.register(\"staging\");\n-\n-        assert_eq!(\n-            crate::redact_string(\"deploy to staging\"),\n-            \"deploy to staging\"\n-        );\n-        assert_eq!(\n-            redactor.redact_into(\"deploy to staging\"),\n-            \"deploy to REDACTED\"\n-        );\n-    }\n-\n-    #[test]\n-    fn ignores_empty_and_whitespace_values() {\n-        let redactor = SecretRedactor::default();\n-        redactor.register(\"\");\n-        redactor.register(\"   \");\n-\n-        assert_eq!(\n-            redactor.redact_into(\"deploy to staging\"),\n-            \"deploy to staging\"\n-        );\n-    }\n-\n-    #[test]\n-    fn redacts_overlapping_values_longest_first() {\n-        let redactor = SecretRedactor::default();\n-        redactor.register(\"abc\");\n-        redactor.register(\"abcdef\");\n-\n-        assert_eq!(redactor.redact_into(\"token=abcdef\"), \"token=REDACTED\");\n-    }\n-\n-    #[test]\n-    fn empty_registry_is_identity() {\n-        let redactor = SecretRedactor::default();\n-        let value = json!({\n-            \"env\": \"staging\",\n-            \"items\": [\"staging\", 42],\n-        });\n-\n-        assert_eq!(\n-            redactor.redact_into(\"deploy to staging\"),\n-            \"deploy to staging\"\n-        );\n-        assert_eq!(redactor.redact_json(value.clone()), value);\n-        assert!(redactor.is_empty());\n-    }\n-\n-    #[test]\n-    fn redact_json_redacts_nested_object_values_and_array_elements() {\n-        let redactor = SecretRedactor::default();\n-        redactor.register(\"staging\");\n-        let value = json!({\n-            \"environment\": \"staging\",\n-            \"items\": [\n-                \"keep\",\n-                \"deploy staging now\"\n-            ],\n-            \"staging\": \"object keys are not redacted\",\n-        });\n-\n-        assert_eq!(\n-            redactor.redact_json(value),\n-            json!({\n-                \"environment\": \"REDACTED\",\n-                \"items\": [\n-                    \"keep\",\n-                    \"deploy REDACTED now\"\n-                ],\n-                \"staging\": \"object keys are not redacted\",\n-            })\n-        );\n-    }\n-\n-    #[test]\n-    fn clones_share_registered_values() {\n-        let redactor = SecretRedactor::default();\n-        let clone = redactor.clone();\n-\n-        redactor.register(\"staging\");\n-\n-        assert_eq!(clone.redact_into(\"deploy to staging\"), \"deploy to REDACTED\");\n-    }\n-}\ndiff --git a/lib/crates/fabro-types/src/settings/interp.rs b/lib/crates/fabro-types/src/settings/interp.rs\nindex de7442daf..e31c3e8db 100644\n--- a/lib/crates/fabro-types/src/settings/interp.rs\n+++ b/lib/crates/fabro-types/src/settings/interp.rs\n@@ -14,9 +14,10 @@\n //! Resolution timing is split: `vars` substitutes early (server-side, at run\n //! creation) via [`InterpString::substitute_with`], while `env`/`secrets`\n //! resolve late, at consumption time in the process that owns\n-//! the value, via [`InterpString::resolve_with`]. Declared-secret values are\n-//! intended to be registered into a per-run exact-value redactor where secrets\n-//! resolve; sensitivity is not tracked on resolved strings.\n+//! the value, via [`InterpString::resolve_with`]. Resolved secret values are\n+//! plain strings; sensitivity is not tracked. Redaction of run output is\n+//! content-based (entropy analysis plus credential patterns), applied where\n+//! output is serialized.\n \n use std::borrow::Cow;\n use std::fmt;\n",
+        "summary": {
+          "files_changed": 4,
+          "additions": 8,
+          "deletions": 225
+        }
+      }
+    },
+    {
+      "seq": 0,
+      "checkpoint": {
+        "timestamp": "2026-07-11T20:57:20.755016925Z",
+        "current_node": "simplify_gpt",
+        "completed_nodes": [
+          "start",
+          "toolchain",
+          "preflight_compile",
+          "preflight_lint",
+          "implement",
+          "simplify_fable",
+          "simplify_gpt"
+        ],
+        "node_retries": {},
         "context_values": {
           "internal.node_visit_count": 1,
           "graph.goal": "# Remove the unused per-run secret registry (`SecretRedactor`) and stale references to it\n\n**Self-contained implementation plan.** Everything needed to implement this is\nin this file plus the repository. Independent — no preconditions; can land\nanytime.\n\n> **Token notation.** Interpolation tokens are written in this file without\n> their enclosing double curly braces, so the file is safe to pass directly as\n> a workflow goal (the goal templater would otherwise try to expand them).\n> Read `env.NAME`, `secrets.NAME` as the double-curly-brace token form used in\n> the codebase.\n\n## Context and goal\n\nFabro redacts secrets from run output using **content-based** detection:\nentropy analysis plus gitleaks-style credential patterns\n(`fabro_redact::redact_string` / `redact_json_value`), applied where events are\nserialized and where exec-output tails are captured.\n\nA second mechanism was staged but never adopted: `SecretRedactor`, a per-run\nregistry of exact secret values, intended to be populated when declared\nsecrets resolve at the run boundary and then substituted out of run output\n(catching low-entropy secret values that content-based detection cannot). The\ntype landed as infrastructure ahead of its wiring; the wiring PR was\nultimately **not merged** — the team decided the registration approach was too\nmuch plumbing for too little benefit over the existing content-based\nredaction, and content-based redaction is now the settled mechanism.\n\nThat leaves dead code and two stale forward references on main:\n\n- `SecretRedactor` has **zero consumers** outside its own crate — nothing\n  constructs, registers into, or applies it anywhere in the workspace.\n- A doc comment in `fabro-auth` says provider-header secret resolution sits\n  outside the registry \"until exact-match registration is threaded through\" —\n  a follow-up that will never happen.\n- The `InterpString` module doc in `fabro-types` says declared-secret values\n  \"are intended to be registered into a per-run exact-value redactor\" —\n  describing the abandoned design as if it were pending.\n\n**Goal:** delete the dead type and rewrite both stale comments so the code\ndescribes the real architecture (content-based redaction only). Pure\ndeletion/documentation PR — no behavior change.\n\n## Verified current state (as of main `9daca83b3`, 2026-07-09 — re-verify before starting; line numbers are anchors, not gospel)\n\n- `lib/crates/fabro-redact/src/secret_registry.rs` — the whole module\n  (~217 lines: `SecretRedactor` with `register`, `is_empty`, redaction\n  methods, and its unit tests). Uses `crate::Region`, which is **shared** with\n  `entropy.rs` and `gitleaks.rs` and must stay.\n- `lib/crates/fabro-redact/src/lib.rs:11` — `mod secret_registry;` and `:15`\n  `pub use secret_registry::SecretRedactor;`.\n- Workspace-wide grep for `SecretRedactor` outside `fabro-redact` returns\n  nothing (no consumers in `lib/`, `apps/`, or `docs/`). If this grep finds a\n  consumer when you run it, **stop** — the premise of this plan no longer\n  holds; state that instead of deleting.\n- `lib/crates/fabro-auth/src/resolve.rs:479-482` — doc comment on\n  `resolve_extra_headers`:\n  \"Provider header secrets resolve outside the run-boundary redactor\n  registration path. Keep this path free of value logging until exact-match\n  registration is threaded through.\"\n- `lib/crates/fabro-types/src/settings/interp.rs:17-19` — module doc sentence:\n  \"Declared-secret values are intended to be registered into a per-run\n  exact-value redactor where secrets resolve; sensitivity is not tracked on\n  resolved strings.\"\n\n## Implementation\n\n1. **Delete the module**: remove\n   `lib/crates/fabro-redact/src/secret_registry.rs`, the `mod secret_registry;`\n   declaration, and the `pub use secret_registry::SecretRedactor;` re-export\n   from `lib.rs`. Leave `Region`, `redact_string`, `redact_json_value`,\n   `DisplaySafeUrl`, and everything else in the crate untouched.\n2. **Rewrite the `fabro-auth` comment** on `resolve_extra_headers`: keep the\n   operative guidance (never log resolved header values — they may contain\n   secrets), drop the promise of future exact-match registration. Suggested\n   shape: \"Resolved header values may contain secrets; keep this path free of\n   value logging. Content-based redaction covers credential-shaped values on\n   output surfaces, but nothing substitutes these exact values.\"\n3. **Rewrite the `interp.rs` module-doc sentence**: state the real\n   architecture — resolved secret values are plain strings; sensitivity is not\n   tracked on resolved strings; redaction of run output is content-based\n   (entropy + credential patterns), applied where output is serialized. Do not\n   reference a registry or any pending mechanism.\n4. **Sweep for stragglers**: `rg -n \"SecretRedactor|secret_registry|exact-match|exact-value\" lib/ docs/internal/`\n   — any remaining hit that describes per-run exact-value redaction as\n   existing or planned must be removed or rewritten in this PR. (Expected\n   after steps 1–3: no hits.)\n\n## Scope boundaries — deliberately NOT in this PR\n\n- **Content-based redaction** (`redact_string`, `redact_json_value`, the\n  entropy/gitleaks finders, `Region`) — untouched. This PR removes the unused\n  second mechanism, not the working first one.\n- **Where content-based redaction is applied** (event serialization,\n  exec-output tails, server read paths) — no changes to any application site;\n  this PR does not move, add, or remove redaction passes.\n- **`DisplaySafeUrl` and redacting `Debug` impls** — untouched; unrelated\n  pattern.\n- **The live command-output log path** — has no redaction today; a separate\n  planned change addresses it. Do not touch it here.\n- **`fabro-hooks`** — untouched.\n\nIf work outside these boundaries seems genuinely required for this PR to\ncompile or pass its tests, stop and state that in the PR description rather\nthan expanding scope.\n\n## Tests\n\n- No new tests: the deleted module's tests go with it; no behavior changes to\n  test. Existing `fabro-redact` tests (entropy, gitleaks, jsonl, safe-url)\n  must pass unchanged.\n- `cargo build --workspace` proves no hidden consumer existed.\n\n## Acceptance / verification\n\n- `cargo +nightly-2026-04-14 fmt --check --all`\n- `cargo +nightly-2026-04-14 clippy --workspace --all-targets -- -D warnings`\n- `cargo nextest run --workspace`\n- The sweep in step 4 returns clean.\n- No OpenAPI/wire change; no TypeScript client regeneration.\n\n## Conventions\n\n- Plain-English commit messages, PR text, and comments — describe what the\n  change does; no internal planning identifiers or plan-file names in\n  anything that ships.\n- PR description must state plainly: the exact-value registry approach was\n  abandoned in favor of the existing content-based redaction; the type was\n  never wired to any consumer; the two rewritten comments previously promised\n  the abandoned mechanism. Known limitation to state honestly: low-entropy\n  declared secret values (e.g. a secret whose value is an ordinary word) are\n  not caught by content-based detection — this is an accepted trade, not a\n  regression introduced here.\n",
           "internal.fidelity": "compact",
-          "outcome": "succeeded",
+          "outcome": "failed",
           "thread.toolchain.current_node": "preflight_compile",
           "command.output": "blob://sha256/12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126",
           "graph.model_stylesheet": "\n            * { model: claude-opus-4-8; }\n        ",
-          "internal.thread_id": "implement",
+          "internal.thread_id": "simplify_fable",
           "thread.preflight_lint.current_node": "implement",
+          "thread.simplify_fable.current_node": "simplify_gpt",
           "internal.work_dir": "/home/daytona/workspace/fabro",
-          "current_node": "simplify_fable",
+          "current_node": "simplify_gpt",
           "response.simplify_fable": "Done. The previous implement stage had failed on an API auth error before doing any work, so I completed the implementation and then ran the three-agent review.\n\n## What was done\n\n**Implementation** (per the plan):\n- Deleted `lib/crates/fabro-redact/src/secret_registry.rs` (217 lines: the never-consumed `SecretRedactor` and its tests), plus the `mod` declaration and `pub use` re-export in `lib.rs`\n- Rewrote the `resolve_extra_headers` doc comment in `lib/crates/fabro-auth/src/resolve.rs:478-483` — keeps the \"never log resolved header values\" guidance, drops the abandoned exact-match-registration promise, and states the residual risk (low-entropy header values aren't caught by content-based detection)\n- Rewrote the `interp.rs` module doc in `lib/crates/fabro-types/src/settings/interp.rs:17-20` to describe the real architecture: resolved secrets are plain strings, redaction is content-based at output-serialization surfaces\n\n**Review findings** (three parallel agents — reuse, quality, efficiency):\n- All three verdicts: clean. Deletion is complete (zero `SecretRedactor` references remain; the `secret_registry` module in `fabro-static` is an unrelated registry of secret env-var *names*); nothing in `fabro-redact` became dead (`Region`, `redact_regions`, `serde_json`, and all deps still have live users); no runtime code paths changed; no dependent crate lost its reason to depend on `fabro-redact`\n- **Fixed** two wording nits from the quality reviewer: clarified the ambiguous \"nothing substitutes these exact values\" phrasing in `resolve.rs`, and removed the \"resolved … resolved\" redundancy in `interp.rs`\n- **Skipped** one finding: `Region` could be `pub(crate)` — pre-existing and the plan explicitly says leave `Region` untouched\n\n**Verification** — all green:\n- `cargo +nightly-2026-04-14 fmt --check --all` ✓\n- `cargo +nightly-2026-04-14 clippy --workspace --all-targets -- -D warnings` ✓\n- `cargo nextest run --workspace` — 6955 passed, 0 failed ✓\n- Straggler sweep clean (only the unrelated `fabro-static` name registry remains)",
-          "failure_class": "",
-          "failure_signature": "",
+          "failure_class": "deterministic",
+          "internal.retry_count.simplify_gpt": 0,
+          "failure_signature": "simplify_gpt|deterministic|api_deterministic|openai|authentication",
           "graph.rankdir": "LR",
           "thread.start.current_node": "toolchain",
           "internal.retry_count.toolchain": 0,
@@ -961,7 +1130,7 @@
               "active_time_ms": 165593
             }
           },
-          "implement": {
+          "simplify_gpt": {
             "status": "failed",
             "failure": {
               "message": "LLM error: Authentication error for openai: Your authentication token has been invalidated. Please try signing in again.",
@@ -988,6 +1157,15 @@
             "status": "succeeded",
             "usage": null
           },
+          "implement": {
+            "status": "failed",
+            "failure": {
+              "message": "LLM error: Authentication error for openai: Your authentication token has been invalidated. Please try signing in again.",
+              "category": "deterministic",
+              "signature": "api_deterministic|openai|authentication"
+            },
+            "usage": null
+          },
           "simplify_fable": {
             "status": "succeeded",
             "context_updates": {
@@ -1046,13 +1224,14 @@
             }
           }
         },
-        "next_node_id": "simplify_gpt",
+        "next_node_id": "verify",
         "node_visits": {
           "simplify_fable": 1,
           "start": 1,
           "preflight_compile": 1,
           "toolchain": 1,
           "preflight_lint": 1,
+          "simplify_gpt": 1,
           "implement": 1
         }
       },
@@ -1085,6 +1264,180 @@
   "superseded_by": null,
   "pending_interviews": {},
   "stages": {
+    "simplify_gpt@1": {
+      "first_event_seq": 331,
+      "prompt": null,
+      "response": null,
+      "completion": null,
+      "provider_used": {
+        "mode": "agent",
+        "provider": "openai",
+        "model": "gpt-5.5"
+      },
+      "diff": null,
+      "script_invocation": null,
+      "script_timing": null,
+      "parallel_results": null,
+      "output": null,
+      "started_at": "2026-07-11T20:57:20.310279341Z",
+      "handler": "agent",
+      "usage": {
+        "input_tokens": 0,
+        "output_tokens": 0,
+        "total_tokens": 0,
+        "reasoning_tokens": 0,
+        "cache_read_tokens": 0,
+        "cache_write_tokens": 0
+      },
+      "skills": {
+        "available": [
+          {
+            "name": "rust-style-guide",
+            "description": "Apply this Rust style guide when writing, reviewing, refactoring, or configuring Rust code for this project. Covers Rust 2024/MSRV, library vs application conventions, public API design, errors, panics, ownership and cloning, async/Tokio/concurrency, tracing, rustfmt/Clippy, testing with nextest, and unsafe/macro policy. Also use when setting up new Rust projects, investigating Rust performance, verifying library releases, or reviewing Rust code changes."
+          }
+        ],
+        "activated": []
+      },
+      "permission_level": "full",
+      "agent_tools": [
+        {
+          "name": "apply_patch",
+          "description": "Use the `apply_patch` tool to edit files. This is a FREEFORM tool, so do not wrap the patch in JSON.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "write",
+          "invoked": false
+        },
+        {
+          "name": "close_agent",
+          "description": "Close a running subagent that is no longer needed.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "subagent",
+          "invoked": false
+        },
+        {
+          "name": "glob",
+          "description": "Find files by file names using a glob pattern. Use path to choose the search root. Prefer this over shell find or ls when locating repository files.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "read",
+          "invoked": false
+        },
+        {
+          "name": "grep",
+          "description": "Search file contents with a regex pattern. Use path to choose the search root, glob_filter to limit matching files, case_insensitive for case folding, and max_results to cap output.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "read",
+          "invoked": false
+        },
+        {
+          "name": "read_file",
+          "description": "Read files before editing them. Returns line-numbered text and supports offset/limit for large files. Use this instead of shell cat, head, tail, or sed when inspecting repository files.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "read",
+          "invoked": false
+        },
+        {
+          "name": "request_user_input",
+          "description": "Ask the human one or more questions and wait for their answers before continuing this stage.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "other",
+          "invoked": false
+        },
+        {
+          "name": "send_input",
+          "description": "Send a follow-up message to a running subagent when new information or corrected instructions are needed.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "subagent",
+          "invoked": false
+        },
+        {
+          "name": "shell",
+          "description": "Execute shell commands for terminal operations, package managers, tests and builds. Use dedicated tools for file reads, file edits, filename searches, and content searches. Provide timeout_ms for long-running commands.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "shell",
+          "invoked": false
+        },
+        {
+          "name": "spawn_agent",
+          "description": "Spawn a subagent for independent work or context isolation. Use it for tasks that can proceed separately, and avoid duplicating the same work in the parent session.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "subagent",
+          "invoked": false
+        },
+        {
+          "name": "update_plan",
+          "description": "Update the multi-step plan for the current task. Submit the entire plan; existing steps are reconciled by exact step text.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "other",
+          "invoked": false
+        },
+        {
+          "name": "use_skill",
+          "description": "Load a skill's instructions by name. Call this when the user's request matches an available skill.",
+          "source": {
+            "kind": "skill"
+          },
+          "category": "other",
+          "invoked": false
+        },
+        {
+          "name": "wait",
+          "description": "Wait for a subagent to complete, then use the result to synthesize the outcome for the user.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "subagent",
+          "invoked": false
+        },
+        {
+          "name": "web_fetch",
+          "description": "Fetch content from a URL that starts with http:// or https://. Pass a prompt to extract specific information or summarize the page; omit prompt to return the page content.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "other",
+          "invoked": false
+        },
+        {
+          "name": "web_search",
+          "description": "Search the web using Brave Search when current external information is needed. Returns result titles, URLs, and descriptions; use web_fetch for a specific URL.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "other",
+          "invoked": false
+        },
+        {
+          "name": "write_file",
+          "description": "Create new files, or overwrite an existing file only when replacement is explicitly intended. Prefer edit_file for targeted changes to existing files because write_file overwrites the full file content.",
+          "source": {
+            "kind": "native"
+          },
+          "category": "write",
+          "invoked": false
+        }
+      ],
+      "state": "running"
+    },
     "start@1": {
       "first_event_seq": 18,
       "prompt": null,
@@ -1123,7 +1476,12 @@
       "first_event_seq": 69,
       "prompt": null,
       "response": null,
-      "completion": null,
+      "completion": {
+        "outcome": "succeeded",
+        "notes": "Stage completed: simplify_fable",
+        "failure_reason": null,
+        "timestamp": "2026-07-11T20:57:16.893729460Z"
+      },
       "provider_used": {
         "mode": "agent",
         "provider": "anthropic",
@@ -1137,6 +1495,12 @@
       "output": null,
       "started_at": "2026-07-11T20:47:32.729026609Z",
       "handler": "agent",
+      "timing": {
+        "wall_time_ms": 584164,
+        "inference_time_ms": 191710,
+        "tool_time_ms": 392157,
+        "active_time_ms": 583867
+      },
       "usage": {
         "input_tokens": 29702,
         "output_tokens": 10578,
@@ -1430,7 +1794,7 @@
         ],
         "warnings": []
       },
-      "state": "running"
+      "state": "succeeded"
     },
     "toolchain@1": {
       "first_event_seq": 22,
diff --git a/stages/006-simplify_fable@1/diff.patch b/stages/006-simplify_fable@1/diff.patch
new file mode 100644
index 000000000..1edc3ca1f
--- /dev/null
+++ b/stages/006-simplify_fable@1/diff.patch
@@ -0,0 +1,275 @@
+diff --git a/lib/crates/fabro-auth/src/resolve.rs b/lib/crates/fabro-auth/src/resolve.rs
+index 9ab194b3f..60a4576b7 100644
+--- a/lib/crates/fabro-auth/src/resolve.rs
++++ b/lib/crates/fabro-auth/src/resolve.rs
+@@ -477,9 +477,10 @@ impl CredentialResolver {
+ 
+ /// Resolve a provider's `extra_headers` interpolation sources with `ctx`.
+ ///
+-/// Provider header secrets resolve outside the run-boundary redactor
+-/// registration path. Keep this path free of value logging until exact-match
+-/// registration is threaded through.
++/// Resolved header values may contain secrets; keep this path free of value
++/// logging. Content-based redaction covers credential-shaped values on output
++/// surfaces, but no mechanism redacts these exact values, so a low-entropy
++/// header value that does not look like a credential is not caught.
+ pub(crate) fn resolve_extra_headers(
+     provider: &ProviderId,
+     headers: &HashMap<String, String>,
+diff --git a/lib/crates/fabro-redact/src/lib.rs b/lib/crates/fabro-redact/src/lib.rs
+index dd5da867b..8ed562e53 100644
+--- a/lib/crates/fabro-redact/src/lib.rs
++++ b/lib/crates/fabro-redact/src/lib.rs
+@@ -8,11 +8,9 @@ mod entropy;
+ mod gitleaks;
+ mod jsonl;
+ mod safe_url;
+-mod secret_registry;
+ 
+ pub use jsonl::{redact_json_value, redact_jsonl_line};
+ pub use safe_url::{DisplaySafeUrl, DisplaySafeUrlError};
+-pub use secret_registry::SecretRedactor;
+ 
+ pub(crate) const REDACTION_MARKER: &str = "REDACTED";
+ 
+diff --git a/lib/crates/fabro-redact/src/secret_registry.rs b/lib/crates/fabro-redact/src/secret_registry.rs
+deleted file mode 100644
+index 764eb0fe5..000000000
+--- a/lib/crates/fabro-redact/src/secret_registry.rs
++++ /dev/null
+@@ -1,217 +0,0 @@
+-use std::sync::{Arc, PoisonError, RwLock, RwLockReadGuard, RwLockWriteGuard};
+-
+-use serde_json::Value;
+-
+-use crate::Region;
+-
+-/// Per-run registry of exact secret values to redact from strings and JSON.
+-///
+-/// This complements the crate's content-based redaction by redacting registered
+-/// values even when they do not look like credentials. Clones share the same
+-/// registry so callers can hand a redactor to another subsystem and continue to
+-/// register values through the original. Registered values are exact substring
+-/// matches and may be low-entropy strings such as environment names.
+-#[derive(Clone, Default)]
+-pub struct SecretRedactor {
+-    values: Arc<RwLock<Vec<String>>>,
+-}
+-
+-impl SecretRedactor {
+-    /// Register a secret value for exact substring redaction.
+-    ///
+-    /// Empty or whitespace-only values are ignored so an accidental empty
+-    /// registration cannot redact every output boundary.
+-    pub fn register(&self, value: impl Into<String>) {
+-        let value = value.into();
+-        if value.trim().is_empty() {
+-            return;
+-        }
+-
+-        let mut values = self.write();
+-        if !values.contains(&value) {
+-            values.push(value);
+-        }
+-    }
+-
+-    /// Return `true` when no secret values have been registered.
+-    pub fn is_empty(&self) -> bool {
+-        self.read().is_empty()
+-    }
+-
+-    /// Redact all registered secret values from `s`.
+-    pub fn redact_into(&self, s: &str) -> String {
+-        let Some(values) = self.values_snapshot() else {
+-            return s.to_string();
+-        };
+-        redact_string_values(s, &values)
+-    }
+-
+-    /// Redact registered secret values from every JSON string value.
+-    ///
+-    /// Object keys and non-string values are left unchanged.
+-    pub fn redact_json(&self, mut value: Value) -> Value {
+-        let Some(values) = self.values_snapshot() else {
+-            return value;
+-        };
+-
+-        redact_json_leaves(&mut value, &values);
+-        value
+-    }
+-
+-    fn read(&self) -> RwLockReadGuard<'_, Vec<String>> {
+-        self.values.read().unwrap_or_else(PoisonError::into_inner)
+-    }
+-
+-    fn write(&self) -> RwLockWriteGuard<'_, Vec<String>> {
+-        self.values.write().unwrap_or_else(PoisonError::into_inner)
+-    }
+-
+-    fn values_snapshot(&self) -> Option<Vec<String>> {
+-        let values = self.read();
+-        if values.is_empty() {
+-            return None;
+-        }
+-        Some(values.clone())
+-    }
+-}
+-
+-fn redact_json_leaves(value: &mut Value, values: &[String]) {
+-    match value {
+-        Value::Object(obj) => {
+-            for child in obj.values_mut() {
+-                redact_json_leaves(child, values);
+-            }
+-        }
+-        Value::Array(arr) => {
+-            for child in arr {
+-                redact_json_leaves(child, values);
+-            }
+-        }
+-        Value::String(text) => {
+-            let redacted = redact_string_values(text, values);
+-            if redacted != *text {
+-                *text = redacted;
+-            }
+-        }
+-        _ => {}
+-    }
+-}
+-
+-/// Collect every match of each registered value and let
+-/// [`crate::redact_regions`] sort and merge overlaps, so a secret that overlaps
+-/// another is fully redacted.
+-///
+-/// Assumes a small number of registered values (bounded by the run's declared
+-/// secrets), so the per-value scan is not optimized further.
+-fn redact_string_values(s: &str, values: &[String]) -> String {
+-    let mut regions = Vec::new();
+-    for value in values {
+-        for (start, _) in s.match_indices(value) {
+-            regions.push(Region {
+-                start,
+-                end: start + value.len(),
+-            });
+-        }
+-    }
+-
+-    if regions.is_empty() {
+-        return s.to_string();
+-    }
+-
+-    crate::redact_regions(s, regions)
+-}
+-
+-#[cfg(test)]
+-mod tests {
+-    use serde_json::json;
+-
+-    use super::SecretRedactor;
+-
+-    #[test]
+-    fn redacts_registered_low_entropy_value() {
+-        let redactor = SecretRedactor::default();
+-        redactor.register("staging");
+-
+-        assert_eq!(
+-            crate::redact_string("deploy to staging"),
+-            "deploy to staging"
+-        );
+-        assert_eq!(
+-            redactor.redact_into("deploy to staging"),
+-            "deploy to REDACTED"
+-        );
+-    }
+-
+-    #[test]
+-    fn ignores_empty_and_whitespace_values() {
+-        let redactor = SecretRedactor::default();
+-        redactor.register("");
+-        redactor.register("   ");
+-
+-        assert_eq!(
+-            redactor.redact_into("deploy to staging"),
+-            "deploy to staging"
+-        );
+-    }
+-
+-    #[test]
+-    fn redacts_overlapping_values_longest_first() {
+-        let redactor = SecretRedactor::default();
+-        redactor.register("abc");
+-        redactor.register("abcdef");
+-
+-        assert_eq!(redactor.redact_into("token=abcdef"), "token=REDACTED");
+-    }
+-
+-    #[test]
+-    fn empty_registry_is_identity() {
+-        let redactor = SecretRedactor::default();
+-        let value = json!({
+-            "env": "staging",
+-            "items": ["staging", 42],
+-        });
+-
+-        assert_eq!(
+-            redactor.redact_into("deploy to staging"),
+-            "deploy to staging"
+-        );
+-        assert_eq!(redactor.redact_json(value.clone()), value);
+-        assert!(redactor.is_empty());
+-    }
+-
+-    #[test]
+-    fn redact_json_redacts_nested_object_values_and_array_elements() {
+-        let redactor = SecretRedactor::default();
+-        redactor.register("staging");
+-        let value = json!({
+-            "environment": "staging",
+-            "items": [
+-                "keep",
+-                "deploy staging now"
+-            ],
+-            "staging": "object keys are not redacted",
+-        });
+-
+-        assert_eq!(
+-            redactor.redact_json(value),
+-            json!({
+-                "environment": "REDACTED",
+-                "items": [
+-                    "keep",
+-                    "deploy REDACTED now"
+-                ],
+-                "staging": "object keys are not redacted",
+-            })
+-        );
+-    }
+-
+-    #[test]
+-    fn clones_share_registered_values() {
+-        let redactor = SecretRedactor::default();
+-        let clone = redactor.clone();
+-
+-        redactor.register("staging");
+-
+-        assert_eq!(clone.redact_into("deploy to staging"), "deploy to REDACTED");
+-    }
+-}
+diff --git a/lib/crates/fabro-types/src/settings/interp.rs b/lib/crates/fabro-types/src/settings/interp.rs
+index de7442daf..e31c3e8db 100644
+--- a/lib/crates/fabro-types/src/settings/interp.rs
++++ b/lib/crates/fabro-types/src/settings/interp.rs
+@@ -14,9 +14,10 @@
+ //! Resolution timing is split: `vars` substitutes early (server-side, at run
+ //! creation) via [`InterpString::substitute_with`], while `env`/`secrets`
+ //! resolve late, at consumption time in the process that owns
+-//! the value, via [`InterpString::resolve_with`]. Declared-secret values are
+-//! intended to be registered into a per-run exact-value redactor where secrets
+-//! resolve; sensitivity is not tracked on resolved strings.
++//! the value, via [`InterpString::resolve_with`]. Resolved secret values are
++//! plain strings; sensitivity is not tracked. Redaction of run output is
++//! content-based (entropy analysis plus credential patterns), applied where
++//! output is serialized.
+ 
+ use std::borrow::Cow;
+ use std::fmt;
diff --git a/stages/006-simplify_fable@1/status.json b/stages/006-simplify_fable@1/status.json
new file mode 100644
index 000000000..b10ccab50
--- /dev/null
+++ b/stages/006-simplify_fable@1/status.json
@@ -0,0 +1,6 @@
+{
+  "outcome": "succeeded",
+  "notes": "Stage completed: simplify_fable",
+  "failure_reason": null,
+  "timestamp": "2026-07-11T20:57:16.893729460Z"
+}
\ No newline at end of file
diff --git a/stages/007-simplify_gpt@1/prompt.md b/stages/007-simplify_gpt@1/prompt.md
new file mode 100644
index 000000000..8a27814d1
--- /dev/null
+++ b/stages/007-simplify_gpt@1/prompt.md
@@ -0,0 +1,204 @@
+Goal: # Remove the unused per-run secret registry (`SecretRedactor`) and stale references to it
+
+**Self-contained implementation plan.** Everything needed to implement this is
+in this file plus the repository. Independent — no preconditions; can land
+anytime.
+
+> **Token notation.** Interpolation tokens are written in this file without
+> their enclosing double curly braces, so the file is safe to pass directly as
+> a workflow goal (the goal templater would otherwise try to expand them).
+> Read `env.NAME`, `secrets.NAME` as the double-curly-brace token form used in
+> the codebase.
+
+## Context and goal
+
+Fabro redacts secrets from run output using **content-based** detection:
+entropy analysis plus gitleaks-style credential patterns
+(`fabro_redact::redact_string` / `redact_json_value`), applied where events are
+serialized and where exec-output tails are captured.
+
+A second mechanism was staged but never adopted: `SecretRedactor`, a per-run
+registry of exact secret values, intended to be populated when declared
+secrets resolve at the run boundary and then substituted out of run output
+(catching low-entropy secret values that content-based detection cannot). The
+type landed as infrastructure ahead of its wiring; the wiring PR was
+ultimately **not merged** — the team decided the registration approach was too
+much plumbing for too little benefit over the existing content-based
+redaction, and content-based redaction is now the settled mechanism.
+
+That leaves dead code and two stale forward references on main:
+
+- `SecretRedactor` has **zero consumers** outside its own crate — nothing
+  constructs, registers into, or applies it anywhere in the workspace.
+- A doc comment in `fabro-auth` says provider-header secret resolution sits
+  outside the registry "until exact-match registration is threaded through" —
+  a follow-up that will never happen.
+- The `InterpString` module doc in `fabro-types` says declared-secret values
+  "are intended to be registered into a per-run exact-value redactor" —
+  describing the abandoned design as if it were pending.
+
+**Goal:** delete the dead type and rewrite both stale comments so the code
+describes the real architecture (content-based redaction only). Pure
+deletion/documentation PR — no behavior change.
+
+## Verified current state (as of main `9daca83b3`, 2026-07-09 — re-verify before starting; line numbers are anchors, not gospel)
+
+- `lib/crates/fabro-redact/src/secret_registry.rs` — the whole module
+  (~217 lines: `SecretRedactor` with `register`, `is_empty`, redaction
+  methods, and its unit tests). Uses `crate::Region`, which is **shared** with
+  `entropy.rs` and `gitleaks.rs` and must stay.
+- `lib/crates/fabro-redact/src/lib.rs:11` — `mod secret_registry;` and `:15`
+  `pub use secret_registry::SecretRedactor;`.
+- Workspace-wide grep for `SecretRedactor` outside `fabro-redact` returns
+  nothing (no consumers in `lib/`, `apps/`, or `docs/`). If this grep finds a
+  consumer when you run it, **stop** — the premise of this plan no longer
+  holds; state that instead of deleting.
+- `lib/crates/fabro-auth/src/resolve.rs:479-482` — doc comment on
+  `resolve_extra_headers`:
+  "Provider header secrets resolve outside the run-boundary redactor
+  registration path. Keep this path free of value logging until exact-match
+  registration is threaded through."
+- `lib/crates/fabro-types/src/settings/interp.rs:17-19` — module doc sentence:
+  "Declared-secret values are intended to be registered into a per-run
+  exact-value redactor where secrets resolve; sensitivity is not tracked on
+  resolved strings."
+
+## Implementation
+
+1. **Delete the module**: remove
+   `lib/crates/fabro-redact/src/secret_registry.rs`, the `mod secret_registry;`
+   declaration, and the `pub use secret_registry::SecretRedactor;` re-export
+   from `lib.rs`. Leave `Region`, `redact_string`, `redact_json_value`,
+   `DisplaySafeUrl`, and everything else in the crate untouched.
+2. **Rewrite the `fabro-auth` comment** on `resolve_extra_headers`: keep the
+   operative guidance (never log resolved header values — they may contain
+   secrets), drop the promise of future exact-match registration. Suggested
+   shape: "Resolved header values may contain secrets; keep this path free of
+   value logging. Content-based redaction covers credential-shaped values on
+   output surfaces, but nothing substitutes these exact values."
+3. **Rewrite the `interp.rs` module-doc sentence**: state the real
+   architecture — resolved secret values are plain strings; sensitivity is not
+   tracked on resolved strings; redaction of run output is content-based
+   (entropy + credential patterns), applied where output is serialized. Do not
+   reference a registry or any pending mechanism.
+4. **Sweep for stragglers**: `rg -n "SecretRedactor|secret_registry|exact-match|exact-value" lib/ docs/internal/`
+   — any remaining hit that describes per-run exact-value redaction as
+   existing or planned must be removed or rewritten in this PR. (Expected
+   after steps 1–3: no hits.)
+
+## Scope boundaries — deliberately NOT in this PR
+
+- **Content-based redaction** (`redact_string`, `redact_json_value`, the
+  entropy/gitleaks finders, `Region`) — untouched. This PR removes the unused
+  second mechanism, not the working first one.
+- **Where content-based redaction is applied** (event serialization,
+  exec-output tails, server read paths) — no changes to any application site;
+  this PR does not move, add, or remove redaction passes.
+- **`DisplaySafeUrl` and redacting `Debug` impls** — untouched; unrelated
+  pattern.
+- **The live command-output log path** — has no redaction today; a separate
+  planned change addresses it. Do not touch it here.
+- **`fabro-hooks`** — untouched.
+
+If work outside these boundaries seems genuinely required for this PR to
+compile or pass its tests, stop and state that in the PR description rather
+than expanding scope.
+
+## Tests
+
+- No new tests: the deleted module's tests go with it; no behavior changes to
+  test. Existing `fabro-redact` tests (entropy, gitleaks, jsonl, safe-url)
+  must pass unchanged.
+- `cargo build --workspace` proves no hidden consumer existed.
+
+## Acceptance / verification
+
+- `cargo +nightly-2026-04-14 fmt --check --all`
+- `cargo +nightly-2026-04-14 clippy --workspace --all-targets -- -D warnings`
+- `cargo nextest run --workspace`
+- The sweep in step 4 returns clean.
+- No OpenAPI/wire change; no TypeScript client regeneration.
+
+## Conventions
+
+- Plain-English commit messages, PR text, and comments — describe what the
+  change does; no internal planning identifiers or plan-file names in
+  anything that ships.
+- PR description must state plainly: the exact-value registry approach was
+  abandoned in favor of the existing content-based redaction; the type was
+  never wired to any consumer; the two rewritten comments previously promised
+  the abandoned mechanism. Known limitation to state honestly: low-entropy
+  declared secret values (e.g. a secret whose value is an ordinary word) are
+  not caught by content-based detection — this is an accepted trade, not a
+  regression introduced here.
+
+
+## Completed stages
+- **toolchain**: succeeded
+  - Script: `command -v cargo >/dev/null || { curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y && sudo ln -sf $HOME/.cargo/bin/* /usr/local/bin/; }; cargo --version 2>&1`
+  - Output:
+    ```
+    cargo 1.95.0 (f2d3ce0bd 2026-03-21)
+    ```
+- **preflight_compile**: succeeded
+  - Script: `cargo check -q --workspace 2>&1`
+  - Output: (empty)
+- **preflight_lint**: succeeded
+  - Script: `cargo +nightly-2026-04-14 clippy -q --workspace --all-targets -- -D warnings 2>&1`
+  - Output: (empty)
+- **implement**: failed
+- **simplify_fable**: succeeded
+  - Model: claude-fable-5, 29.7k tokens in / 10.6k out
+  - Files: /home/daytona/workspace/fabro/lib/crates/fabro-auth/src/resolve.rs, /home/daytona/workspace/fabro/lib/crates/fabro-redact/src/lib.rs, /home/daytona/workspace/fabro/lib/crates/fabro-types/src/settings/interp.rs
+
+
+# Simplify: Code Review and Cleanup
+
+Review all changes for reuse, quality, and efficiency. Fix any issues found. Feel free to use any sub agents you need.
+
+## Phase 1: Identify Changes
+
+Run git diff (or git diff HEAD if there are staged changes) to see what changed. If there are no git changes, review the most recently modified files that the user mentioned or that you edited earlier in this conversation. (You may already have the changes in context, if so, feel free to skip this part)
+
+## Phase 2: Launch Three Review Agents in Parallel
+
+Use the Agent tool to launch all three agents concurrently in a single message. Pass each agent the full diff so it has the complete context.
+
+### Agent 1: Code Reuse Review
+
+For each change:
+
+1. Search for existing utilities and helpers that could replace newly written code. Use Grep to find similar patterns elsewhere in the codebase — common locations are utility directories, shared modules, and files adjacent to the changed ones.
+2. Flag any new function that duplicates existing functionality. Suggest the existing function to use instead.
+3. Flag any inline logic that could use an existing utility — hand-rolled string manipulation, manual path handling, custom environment checks, ad-hoc type guards, and similar patterns are common candidates.
+
+Note: This is a greenfield app, so focus on maximizing simplicity and don't worry about changing things to achieve it.
+
+### Agent 2: Code Quality Review
+
+Review the same changes for hacky patterns:
+
+1. Redundant state: state that duplicates existing state, cached values that could be derived, observers/effects that could be direct calls
+2. Parameter sprawl: adding new parameters to a function instead of generalizing or restructuring existing ones
+3. Copy-paste with slight variation: near-duplicate code blocks that should be unified with a shared abstraction
+4. Leaky abstractions: exposing internal details that should be encapsulated, or breaking existing abstraction boundaries
+5. Stringly-typed code: using raw strings where constants, enums (string unions), or branded types already exist in the codebase
+
+Note: This is a greenfield app, so be aggressive in optimizing quality.
+
+### Agent 3: Efficiency Review
+
+Review the same changes for efficiency:
+
+1. Unnecessary work: redundant computations, repeated file reads, duplicate network/API calls, N+1 patterns
+2. Missed concurrency: independent operations run sequentially when they could run in parallel
+3. Hot-path bloat: new blocking work added to startup or per-request/per-render hot paths
+4. Unnecessary existence checks: pre-checking file/resource existence before operating (TOCTOU anti-pattern) — operate directly and handle the error
+5. Memory: unbounded data structures, missing cleanup, event listener leaks
+6. Overly broad operations: reading entire files when only a portion is needed, loading all items when filtering for one
+
+## Phase 3: Fix Issues
+
+Wait for all three agents to complete. Aggregate their findings and fix each issue directly. If a finding is a false positive or not worth addressing, note it and move on — do not argue with the finding, just skip it.
+
+When done, briefly summarize what was fixed (or confirm the code was already clean).
diff --git a/stages/007-simplify_gpt@1/provider_used.json b/stages/007-simplify_gpt@1/provider_used.json
new file mode 100644
index 000000000..a04162cbf
--- /dev/null
+++ b/stages/007-simplify_gpt@1/provider_used.json
@@ -0,0 +1,5 @@
+{
+  "mode": "agent",
+  "provider": "openai",
+  "model": "gpt-5.5"
+}
\ No newline at end of file