Leak scanner reveals AI reasoning channels expose secrets even when outputs stay clean

A developer-built leak scanner tested on four common AI models found that data escapes through reasoning channels while visible outputs remain clean. The tool caught literal secrets with zero false positives but failed on unknown data families. The author warns that confidence in token security is not coverage, citing a $82,314 stolen API key incident and 88% of organizations reporting agent breaches.