redact

Overview ¶

Package redact scrubs secret-shaped values from text seamark stores or displays: audited command lines (the gate's opt-in raw log), mined review-comment bodies, and fix-commit patches. It is best-effort pattern scrubbing, not a guarantee — but a credential a reviewer quoted once must not be re-broadcast into agent context on every edit, which is exactly what an unredacted finding does.

A leaf package: the gate and the miners (reviews, fixes) must scrub identically, and none of them may import another for it.