redact

Overview ¶

Package redact scrubs live credentials from text before it is persisted.

A memory store inevitably records conversations and shell activity, so the realistic security goal is not "the content is invisible if the DB leaks" (it can't be — that's what the data is) but "the DB holds no usable credentials". Scrubbing secrets at every ingestion path bounds the blast radius of a database compromise to information disclosure, never lateral movement via leaked tokens/keys.

The rules target high-signal, low-false-positive secret shapes. They are best-effort: an exotic credential format can slip through, so this is one layer of defense, not a guarantee.