Forge processes authenticated private repository content only to search, plan, record results, and record decisions. Access tokens and secrets are not stored in tool results or audit payloads. Audit records retain actor, action, target, outcome, timing, and input hashes.