Expand description
Real-time sensitive-data redaction engine for audit event payloads.
Scans JSON values (or raw JSON bytes) for sensitive data — API keys,
email addresses, credit card numbers, Social Security numbers, public
IPv4 addresses — and replaces matching spans with a configurable
placeholder (default [REDACTED]). JSON pointer paths can be used to
unconditionally redact specific subtrees.
All regex compilation happens once at engine construction. The resulting
RedactionEngine is Send + Sync and safe for use across async
worker tasks.
Re-exports§
pub use engine::RedactError;pub use engine::RedactionConfig;pub use engine::RedactionEngine;
Modules§
- engine
- Core redaction engine: pattern matching, JSON-tree walking, pointer-path redaction.