what i'm working on, served raw. the public view is plan.txt.
plan.txt
the full plan lives locally in .plan (gitignored); a pre-commit hook publishes the filtered plan.txt and an age-encrypted .plan.age. lines flagged %hidden never reach the public file.
.plan
.plan.age
%hidden