diff --git a/.gitleaks.toml b/.gitleaks.toml
index 9dec22224..179e0ec55 100644
--- a/.gitleaks.toml
+++ b/.gitleaks.toml
@@ -5,6 +5,13 @@
 useDefault = true
 
 [allowlist]
-description = "Documentation placeholders, not credentials"
+description = "Documentation placeholders, public OAuth/telemetry client constants, and test fixtures"
 regexTarget = "match"
 regexes = ['''^your_[a-z_]+>''']
+paths = [
+  '''apps/[^/]+/tests/.*''',
+  '''packages/[^/]+/tests/.*''',
+  '''docs/quality/.*''',
+  '''agent-skills/space-hyperframes/media-use/scripts/lib/telemetry\.mjs''',
+  '''packages/gateway/src/providers/claude/oauth\.ts'''
+]
diff --git a/apps/api/tests/room-watchdog.test.ts b/apps/api/tests/room-watchdog.test.ts
index b22353a15..a76bda91c 100644
--- a/apps/api/tests/room-watchdog.test.ts
+++ b/apps/api/tests/room-watchdog.test.ts
@@ -253,9 +253,9 @@ describe("Room Watchdog and Anti-Freeze Protection", () => {
         paneTitle: pane.title,
         runtimeId: "cli:gemini",
         durationMs: 8000,
-        killedAt: new Date().toISOString()
+        killedAt: new Date(Date.now() + 1_000).toISOString()
       },
-      createdAt: new Date().toISOString()
+      createdAt: new Date(Date.now() + 1_000).toISOString()
     };
 
     const recorded = await store.recordRoomEvent(watchdogEvent);