# Library and Findings

> Save captured sessions to your team's library with tags, find and diff them, keep team findings with assignees, and report a bug straight to the team.

Source: https://docs.subcloak.com/cloak-proxy/team/library-and-findings/

Added in Cloak Proxy 0.7.0.

{/* L9 draft. Sources: PLAN 7.6, 7.8, 7.9 (CI entries), 7.14 (capture and retention policies), 10 (Library window, Bug Report, Findings). Re-check labels against L8. */}

The **team library** is a shared, end-to-end encrypted shelf of captured sessions, each with a title and tags. **Team Findings** keeps the team's findings and bug reports, with an assignee, a status and a severity.

## Save a session to the library

{/* PLAN 7.6 */}

Choose **Save to Team Library…** from the traffic list (the selected requests or the whole session). Give it a title and tags.

Before upload, the [share leak check](https://docs.subcloak.com/cloak-proxy/cloud/share-links/#the-leak-check) runs with your team's policy:

- known secret formats are redacted by default;
- if the policy says so, **Hide all body values** is forced on;
- if the policy **Capture into team sessions: allowed apps and hosts** lists apps and hosts, requests from anything else are left out. {/* PLAN 7.14 */}

The upload doesn't happen if the check fails or doesn't finish. {/* PLAN 12.3 item 37 */}

## Find and open sessions

{/* PLAN 7.6, 10 */}

The **Library** window lists entries with **Title**, **Tags**, **Hosts**, **Flows**, **By**, **Date** and, for CI recordings, a pass or fail mark. Search by tag, title, host, app or author. The search runs on your Mac over the entries it has decrypted: each Mac in the team syncs every entry, its session included, so it can search and open them offline.

- **Open** a session to see its flows in the traffic list.
- **Diff with…** compares two entries with [Release diff](https://docs.subcloak.com/cloak-proxy/testing/release-diff/).
- **Keep** saves a CI recording as a normal entry, so it isn't removed after 30 days.
- **Delete** removes an entry. It stays in [version history](https://docs.subcloak.com/cloak-proxy/team/version-history/) for 90 days.

Entries are kept until someone deletes them, within the team's storage, unless the policy **Library retention** is set to 30, 90 or 365 days. Then Subcloak's server deletes entries older than that. {/* PLAN 7.6, 7.14 */}

## Team Findings

{/* PLAN 7.8 */}

The [Findings](https://docs.subcloak.com/cloak-proxy/security/findings/) window has a source **Team: Acme** next to your local engagements. Team findings have the same fields as local ones, plus an **assignee**, a **status** and a **severity**, and a comment thread. Choosing an assignee sends them an **assigned** notification.

## Report Bug to the team

{/* PLAN 7.8 */}

In [Report Bug](https://docs.subcloak.com/cloak-proxy/sessions/report-bug/), choose the destination **Team (Acme)** beside GitHub, Jira and Linear. Cloak Proxy creates a team finding of kind "bug" with the selected flows as evidence, after the leak check under the team's policy. Pick an assignee to notify them.

## Related

  - [CI with cloakctl](https://docs.subcloak.com/cloak-proxy/team/ci/): Upload CI recordings to the library.
  - [Policies](https://docs.subcloak.com/cloak-proxy/team/policies/): Capture restrictions and retention.
  - [Comments and notifications](https://docs.subcloak.com/cloak-proxy/team/comments/): Assigned and mention notifications.