AI coding agents like Cursor and Claude Code are repeating a common developer mistake by removing secrets only from the latest code, not from Git history. Research found around 124,000 GitHub commits with phrases like “redact exposed client secret” where the value remained accessible one commit earlier.