Files
LedgerLine/common
Movses AslanyanandClaude Opus 5.5 52a6d711a0 Redact denylisted fields before a log line is rendered
A processor in the shared chain masks sensitive field names (credential
fragments like password/token/authorization, plus exact names such as
card_number and holder_name) at any depth, for structlog and stdlib
records alike. It sees field names only: values interpolated into the
event string still leak until call sites pass them as fields.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-13 20:45:01 +03:30
..