[penso]

Summary

Part of Phase 2 of docs/i18n.md, following #880's patterns. Stacked on #924 (it uses i18n::leak_tests::uncut from there); GitHub retargets it to main once #924 merges.

The activity bar's Security section takes its text from security.ftl, and security.rs is marked // i18n: migrated. That covers its header, its notes, the reported and per-repository cards, the filter and pills, the list beside an open item, and every tab of an alert's page (Overview, Advisory, Dependency path) and a report's page (Report, Advisory draft, Conversation).

• Plurals and times: "1 private vulnerability report in triage" / "50+ … reports", open counts, and relative times are Fluent selectors and messages. Dates ("Oct 14, 2026 · 5 h ago") choose the month in the message.
• Severity: keeps its English label() for agent prompts and gains text() for the window.
• Page tabs: keep a stable id() for element IDs and selectors, so security-tab-Advisory becomes security-tab-advisory.
• Stays English: the fix and investigate prompts written for an agent, upgrade commands, and GraphQL queries are marked // i18n: data. docs/i18n.md now lists agent prompts among what is never translated.
• Shared look: the orchestrator's Look takes owned labels for icon buttons, toggles, and compact buttons. Existing &'static str callers still compile.
• Errors stay $error placeables.
• Leak test: security/tests/en_xa.rs opens the section with every kind of note (quiet, alerts off, unreadable, failed), then each tab of an alert's and a report's page with full GitHub data. Detail lines join facts with " · ", so a line that is not one message is checked fact by fact.

English text is unchanged.

Screenshots

Native macOS captures, debug build, against an isolated sandbox daemon. The sandbox has no GitHub sign-in, so the section shows its sign-in note; the cards and pages are covered by the leak test.

en-XA (accented, longer)	en-XB (right to left)

QA

• just format
• just ci on 7679e1f1 (macOS arm64): passed, 14,940 Rust tests, 0 failed; check-i18n: 1283 messages in 37 files valid and used
• en-XA leak test: the section's cards and notes, and every tab of an alert's and a report's page
• Native en-XA and en-XB check of the signed-out Security section (screenshots above)
• Native check signed in to GitHub with alerts or reports: cards, the list beside an open item, and each page tab under en-XA and en-XB
• Start agent on an alert: the fan-out dialog's prompt is English under en-XA
• English: the Security section reads as before

just lint-linux/lint-windows were not run: no cfg gates changed.

🤖 Generated with Claude Code

https://claude.ai/code/session_01BFavh5KCVyLoRNDUMJmjfN

[penso]

just ci ran locally and passed on ebd4b7a (macOS arm64, with main and #924 merged in): 15,506 Rust tests, 0 failed. No extra recipes: no cfg gates changed.

[greptile-apps]

Confidence Score: 5/5

[Medium impact] The PR appears safe to merge; no new actionable issues were found.

Summary

Moves the Security section and its alert and report pages to Fluent messages.

• Security cards and notes get their wording from Fluent messages.
• Alert and report pages get translated tabs and detail text.

_{Reviews (2) · Last reviewed commit: "refactor: keep the Security filter's pla..." · Reviewed by Greptile}

[penso]

@greptileai review — the filter placeholder finding is addressed in ebd4b7a (set_placeholder_with).