Commit

Clipboard managers remember what you copied. None I tried remember where you pasted it. That gap is how API keys end up in Slack threads. So we're building Paster for macOS: it watches paste events, keeps a record of which app each paste went to, and warns when something credential-shaped goes somewhere risky (Slack yes, your terminal no). History is encrypted at rest, and the app makes zero network connections. Catch: it needs an event tap, and the App Store sandbox forbids that. So it will ship as a notarized DMG. Would you run a clipboard tool that logs your pastes, or is that worse than the leak?