security: scrub committed secrets/PII/internal data from working tree

Adversarial fresh-eye review found sensitive + irrelevant data committed. This
clears it from HEAD (history rewrite follows separately):

- CRITICAL: redact the live 12-word MNEMONIC in docs/archive/HANDOFF-2026-04-11.md
- HIGH: drop hardcoded operator wallet default in scripts/audit-rpc-endpoints.mjs
  (now requires the address as an explicit argv)
- PII: remove operator email + 'operator-role' descriptor from CLAUDE.md
- replace real node addresses + monikers with synthetic examples in
  docs/BUILD-ON-ME.md, easy.js, docs/archive/HANDOFF-2026-04-11.md
- replace real Tor-relay IP with an RFC5737 doc IP in docs/CLI.md
- packaging: stop shipping docs/archive/ + memory/ to npm (files: docs/ -> docs/*.md;
  .npmignore additions); add the runtime-required about-modal.js + logo.jpg to the
  npm files allowlist (were referenced by live/public/index but never published)
- untrack internal memory/handoff-node-tester.md; gitignore memory/

No functional code paths touched; full test suite green (188+ across 17 files).

Author: Sentinel-Bluebuilder

.gitignore

@@ -33,6 +33,7 @@ scripts/research/
 # Internal dev files (session handoff, internal suggestions)
 HANDOFF.md
 suggestions/
+memory/
 
 # C# bridge build artifacts
 csharp-bridge/bin/

.npmignore

@@ -5,6 +5,11 @@ results/
 HANDOFF.md
 suggestions/
 
+# Internal/stale docs — never ship to npm consumers (historical session
+# handoffs + internal audits; not consumer documentation)
+docs/archive/
+memory/
+
 # Build artifacts
 csharp-bridge/obj/
 csharp-bridge/bin/

CLAUDE.md

@@ -1,6 +1,6 @@
 # Sentinel Node Tester — Project Instructions
 
-> **New Claude session: read this file first, then `memory/handoff-node-tester.md` (current state), then `ARCH.md` (module map). Stop there.** Everything under `docs/` is reference material — open only when the task needs it. Files in `docs/archive/` are historical and may contradict current code; treat them as read-only context, never as source of truth. The user is `the operator`; the tester is their primary network audit instrument.
+> **New Claude session: read this file first, then `memory/handoff-node-tester.md` (current state), then `ARCH.md` (module map). Stop there.** Everything under `docs/` is reference material — open only when the task needs it. Files in `docs/archive/` are historical and may contradict current code; treat them as read-only context, never as source of truth. The user is the operator; the tester is their primary network audit instrument.
 
 ## What this is
 Standalone tool for stress-testing every node on the Sentinel chain. Runs sessions, measures speed/latency, persists results in `audit.db` (SQLite). Type 1 deployment (Node.js server + browser dashboard) per global CLAUDE.md categorization. Published to npm as `sentinel-node-tester`. Canonical repo: `Sentinel-Bluebuilder/sentinel-node-tester` (renamed from `Sentinel-Bluebuilder` on 2026-04-30 — old URLs auto-redirect but always use the new name in new code/docs).

docs/BUILD-ON-ME.md

@@ -245,17 +245,17 @@ volatile bool _stopRequested;
 
 ### WireGuard PASS
 ```json
-{"timestamp":"2026-03-24T01:15:04Z","address":"sentnode1redactedxxxxxxxxxxxxxxxxxxxxxxxxxxxx","type":"WireGuard","moniker":"example-node-01","country":"Australia","countryCode":"AU","city":"Sydney","peers":8,"actualMbps":45.2,"speedMethod":"multi-request","googleAccessible":true,"googleLatencyMs":145,"baselineAtTest":120.5,"pass10mbps":true,"pass15mbps":true,"error":null}
+{"timestamp":"2026-03-24T01:15:04Z","address":"sentnode1example0001xxxxxxxxxxxxxxxxxxxxxxxxxxx","type":"WireGuard","moniker":"example-node-01","country":"Australia","countryCode":"AU","city":"Sydney","peers":8,"actualMbps":45.2,"speedMethod":"multi-request","googleAccessible":true,"googleLatencyMs":145,"baselineAtTest":120.5,"pass10mbps":true,"pass15mbps":true,"error":null}
 ```
 
 ### V2Ray PASS
 ```json
-{"timestamp":"2026-03-24T02:31:48Z","address":"sentnode1redactedxxxxxxxxxxxxxxxxxxxxxxxxxxxx","type":"V2Ray","moniker":"example-node-02","country":"Chile","countryCode":"CL","city":"","peers":1,"actualMbps":12.8,"speedMethod":"multi-request","googleAccessible":true,"googleLatencyMs":230,"diag":{"v2rayTransport":"grpc","v2raySecurity":"none","v2rayPort":55215,"clockDriftSec":-1},"error":null}
+{"timestamp":"2026-03-24T02:31:48Z","address":"sentnode1example0002xxxxxxxxxxxxxxxxxxxxxxxxxxx","type":"V2Ray","moniker":"example-node-02","country":"Chile","countryCode":"CL","city":"","peers":1,"actualMbps":12.8,"speedMethod":"multi-request","googleAccessible":true,"googleLatencyMs":230,"diag":{"v2rayTransport":"grpc","v2raySecurity":"none","v2rayPort":55215,"clockDriftSec":-1},"error":null}
 ```
 
 ### V2Ray FAIL
 ```json
-{"timestamp":"2026-03-24T00:50:04Z","address":"sentnode1redactedxxxxxxxxxxxxxxxxxxxxxxxxxxxx","type":"V2Ray","moniker":"example-node-03","country":"Bahrain","countryCode":"BH","city":"","peers":8,"actualMbps":null,"googleAccessible":false,"error":"All V2Ray transports failed","diag":{"clockDriftSec":245,"v2rayMetadataCount":2}}
+{"timestamp":"2026-03-24T00:50:04Z","address":"sentnode1example0003xxxxxxxxxxxxxxxxxxxxxxxxxxx","type":"V2Ray","moniker":"example-node-03","country":"Bahrain","countryCode":"BH","city":"","peers":8,"actualMbps":null,"googleAccessible":false,"error":"All V2Ray transports failed","diag":{"clockDriftSec":245,"v2rayMetadataCount":2}}
 ```
 
 ---

docs/CLI.md

@@ -132,8 +132,8 @@ sentinel-audit nodes --country DE --type wireguard --limit 5 --pretty
     {
       "address": "sentnode1abc123def456ghi789jkl012mno345pqr678stu",
       "moniker": "de-node-01",
-      "remoteUrl": "https://198.51.100.1:8080",
-      "remoteAddrs": ["198.51.100.1:8080"],
+      "remoteUrl": "https://198.51.100.42:8080",
+      "remoteAddrs": ["198.51.100.42:8080"],
       "country": "Germany",
       "countryCode": "DE",
       "city": "Frankfurt",
@@ -173,7 +173,7 @@ sentinel-audit node sentnode1abc123def456ghi789jkl012mno345pqr678stu --pretty
 {
   "address": "sentnode1abc123def456ghi789jkl012mno345pqr678stu",
   "moniker": "de-node-01",
-  "remoteUrl": "https://198.51.100.1:8080",
+  "remoteUrl": "https://198.51.100.42:8080",
   "type": "wireguard",
   "peers": 3,
   "bandwidth": {

docs/archive/HANDOFF-2026-04-11.md

@@ -88,7 +88,7 @@ sentinel-node-tester/
 
 ## Environment (.env)
 ```
-MNEMONIC=<redacted-mnemonic>
+MNEMONIC=<your-12-word-mnemonic-here>
 RPC=https://rpc.sentinel.co:443
 DENOM=udvpn
 GAS_PRICE=0.2udvpn
@@ -365,8 +365,8 @@ Reuse if session exists for node AND (gigabytes=0 OR consumed < allocated).
 
 ## Known Broken Nodes
 Skip list in `test-v2ray.js` BROKEN_NODES Set:
-- `sentnode1redactedxxxxxxxxxxxxxxxxxxxxxxxxxxxx` — nil UUID state bug on node
-- `sentnode1redactedxxxxxxxxxxxxxxxxxxxxxxxxxxxx` (us04.quinz.top) — handshake OK but proxy always fails
+- `sentnode1example0001xxxxxxxxxxxxxxxxxxxxxxxxxxx` — nil UUID state bug on node
+- `sentnode1example0002xxxxxxxxxxxxxxxxxxxxxxxxxxx` (example-host) — handshake OK but proxy always fails
 
 ---
 

easy.js

@@ -110,7 +110,7 @@ export async function getNodes(opts = {}) {
  * @example
  *   const result = await testOne({
  *     mnemonic: 'your twelve words...',
- *     node: 'sentnode1redactedxxxxxxxxxxxxxxxxxxxxxxxxxxxx',
+ *     node: 'sentnode1abc123def456ghi789jkl012mno345pqr678stu',
  *   });
  *   console.log(result.pass ? `PASS: ${result.speed} Mbps` : `FAIL: ${result.error}`);
  */