# Evidence Directory Agents store non-secret evidence here. Rules: - Do not store passwords, tokens, API keys, cookies, private keys, or `OPENCLAW_GATEWAY_TOKEN`. - Prefer short command summaries over full logs when logs may contain secrets. - Use names such as `pc-YYYYMMDD-topic.md`, `vps-YYYYMMDD-topic.md`, `verify-pc-YYYYMMDD-topic.md`, or `verify-vps-YYYYMMDD-topic.md`.