feat(data-retention): granular PII redaction stages (input + block outputs)#5272

Merged

TheodoreSpeaks merged 21 commits into

stagingfrom

feat/pii-granular-redaction

Jul 2, 2026

Commits on Jun 29, 2026

feat(data-retention): granular PII redaction stages (input + block outputs)
TheodoreSpeaks
committed

Commits on Jun 30, 2026

fix(data-retention): propagate block-output redaction into child workflows
TheodoreSpeaks
committed
fix(data-retention): close block-output redaction gaps on streaming + resume
TheodoreSpeaks
committed
fix(data-retention): drain+mask streamed output, resolve PII policy unconditionally (no fail-open)
TheodoreSpeaks
committed
test(testing): support leftJoin().where().limit() in shared db mock
TheodoreSpeaks
committed
fix(data-retention): mask agent/Pi memory writes under block-output redaction
TheodoreSpeaks
committed
Merge remote-tracking branch 'origin/staging' into feat/pii-granular-redaction
TheodoreSpeaks
committed
fix(data-retention): guard partial PII stages in GET normalize
TheodoreSpeaks
committed
fix(data-retention): mask seeded memory messages under block-output redaction
TheodoreSpeaks
committed
fix(guardrails): fail closed on misaligned Presidio batch responses
TheodoreSpeaks
committed
fix(data-retention): enabled stage with no entity types redacts all (no fail-open)
TheodoreSpeaks
committed
fix(data-retention): reject enabled stage with no entity types; empty = off everywhere
TheodoreSpeaks
committed
docs(data-retention): note resume remask covers inline values only
TheodoreSpeaks
committed
fix(data-retention): scrub offloaded large-value refs from logs when block-output redaction is off
TheodoreSpeaks
committed
fix(data-retention): hydrate, mask, and re-store large-value refs in logs (preserve redacted content)
TheodoreSpeaks
committed
fix(data-retention): always apply logs policy to large-value refs when logs stage is on
TheodoreSpeaks
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat(data-retention): granular PII redaction stages (input + block outputs)#5272

feat(data-retention): granular PII redaction stages (input + block outputs)#5272
TheodoreSpeaks merged 21 commits into
stagingfrom
feat/pii-granular-redaction

Commits on Jun 29, 2026

feat(data-retention): granular PII redaction stages (input + block outputs)

Commits on Jun 30, 2026

fix(data-retention): propagate block-output redaction into child workflows

fix(data-retention): close block-output redaction gaps on streaming + resume

fix(data-retention): drain+mask streamed output, resolve PII policy unconditionally (no fail-open)

test(testing): support leftJoin().where().limit() in shared db mock

fix(data-retention): mask agent/Pi memory writes under block-output redaction

Merge remote-tracking branch 'origin/staging' into feat/pii-granular-redaction

fix(data-retention): guard partial PII stages in GET normalize

fix(data-retention): mask seeded memory messages under block-output redaction

fix(guardrails): fail closed on misaligned Presidio batch responses

fix(data-retention): enabled stage with no entity types redacts all (no fail-open)

fix(data-retention): reject enabled stage with no entity types; empty = off everywhere

docs(data-retention): note resume remask covers inline values only

fix(data-retention): scrub offloaded large-value refs from logs when block-output redaction is off

fix(data-retention): hydrate, mask, and re-store large-value refs in logs (preserve redacted content)

fix(data-retention): always apply logs policy to large-value refs when logs stage is on

Commits on Jul 1, 2026

perf(data-retention): drop redaction byte ceiling, parallelize chunks (env-tunable), remove request timeouts, sync large-value walk

Merge remote-tracking branch 'origin/staging' into feat/pii-granular-redaction

feat(data-retention): gate granular PII stages behind pii-granular-redaction flag

docs(pii): describe Presidio as a standalone service, not a sidecar

fix(data-retention): re-mask offloaded large-value refs on resume + don't lock out granular saves