A processor in the shared chain masks sensitive field names (credential fragments like password/token/authorization, plus exact names such as card_number and holder_name) at any depth, for structlog and stdlib records alike. It sees field names only: values interpolated into the event string still leak until call sites pass them as fields. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>