When developers move between branches, sensitive files often slip through. Names, emails, addresses, and IDs can appear in plain text inside logs or configs. Staging or test environments are especially vulnerable. Traditional masking is static — data is cleaned only after it’s saved. By then, it may have been cloned,