Module undercover 

Undercover mode for safe public repository operations

When active, adds safety instructions to commit/PR prompts and strips attribution to avoid leaking internal model codenames, project names, or other internal information.

Activation

• A3S_UNDERCOVER=1 — force ON (even in internal repos)
• Otherwise AUTO: active UNLESS the repo remote matches allowlist
• There is NO force-OFF — safe default

Structs

UndercoverService

Undercover service for managing safe operations

Enums

RepoClass

Internal repository classification

UndercoverStatus

Undercover mode status