17b2ef1961
- 14-VALIDATION.md: per-task map 14-01-T1 to 14-06-T4, all green, the measured coverage, validated, Nyquist-compliant, Wave 0 complete, the final --all and --removal results - REQUIREMENTS.md: INTG-02 and API-08 Complete (JOBS-02, JOBS-03, SRCH-02, INTG-01, CLI-05 already were) - COVERAGE.md: every INTEGRATE row's test confirmed by --named - fetchguard-guarded-http-client and redacting-slog-handler moved to done
724 B
724 B
title, date, priority, area
| title | date | priority | area |
|---|---|---|---|
| Framework slog handler that redacts credentials (port RedactCredentialsTap) | 2026-09-28 | medium | summercms.go logging |
Port Golem15\Apparatus\Classes\Logging\RedactCredentialsTap as a framework slog.Handler wrapper: redact attribute keys api_key, apikey, authorization, bearer, password, secret, token, webhook_secret, admin_password (case-insensitive, nested groups), and scrub its message regex patterns.
Also verify whether surf's error path already gives SafeExceptionResponse behaviour (generic "Internal server error" outside debug, real message logged); add a small helper only if it does not.
See .planning/notes/apparatus-dissolved-into-framework.md.