# Tasks: enterprise-security-codes

## 1. Scaffold
- [x] 1.1 `universal/auth/security-codes/` skeleton with 100/100/100/100 coverage (istanbul).
- [x] 1.2 Guard tests; CLAUDE.md/README/FOLDERS.yml updated.

## 2. Errors + schemas
- [x] 2.1 `src/errors/security-codes-error.ts` — codes `SECURITY_CODES.*`.
- [x] 2.2 Zod schemas for `DetectorOptions`, `SanitizerOptions`, `SecurityCodeMatch`.

## 3. Pattern library
- [x] 3.1 `src/patterns/aws.ts`, `jwt.ts`, `stripe.ts`, `github.ts`, `google.ts`, `openai.ts`, `credit-card.ts` (+ Luhn), `pem.ts`, `ssh.ts`, `entropy.ts`.
- [x] 3.2 Co-located `.md` per pattern.

## 4. Detector
- [x] 4.1 `src/core/code-detector/code-detector.ts` — `SecurityCodeDetector`; plugin registration; OTel counter + histogram.
- [x] 4.2 Co-located `.md`; unit tests per pattern; fuzz tests via fast-check.

## 5. Sanitizer
- [x] 5.1 `src/core/code-sanitizer/code-sanitizer.ts` — `SecurityCodeSanitizer`; strategies: `full-redact`, `partial`, `hash`, `tokenize`.
- [x] 5.2 Idempotency property test.

## 6. Index / README
- [x] 6.1 Barrel; subpath exports per pattern + core.
- [x] 6.2 Root README.

## 7. Benchmarks
- [x] 7.1 Detect / sanitize on 10 KB / 1 MB text fixtures.

## 8. Ship gate
- [x] 8.1 Verification sequence green; fold spec + archive.