diff --git a/agentic_harness/core/redaction.py b/agentic_harness/core/redaction.py
index 50f8a73..967fbcd 100644
--- a/agentic_harness/core/redaction.py
+++ b/agentic_harness/core/redaction.py
@@ -126,6 +126,8 @@ def sensitive_json_key(key: str) -> bool:
         for index in range(len(piece_sequence) - len(phrase) + 1)
     ):
         return True
+    if "githubpat" in semantic_compact and not semantic_compact.endswith("githubpattern"):
+        return True
     return any(
         marker in semantic_compact
         for marker in (
@@ -141,7 +143,6 @@ def sensitive_json_key(key: str) -> bool:
             "bearer",
             "credential",
             "credentials",
-            "githubpat",
             "password",
             "passwd",
             "pwd",