feat(logs): redact PII from workflow logs via configurable rules#5136

Merged

TheodoreSpeaks merged 13 commits into

feat/redact-pii-workflow-log

Jun 19, 2026

Commits on Jun 19, 2026

feat(logs): redact PII from workflow logs via configurable rules
TheodoreSpeaks
committed
Merge remote-tracking branch 'origin/staging' into feat/redact-pii-workflow-log
TheodoreSpeaks
committed
fix(logs): widen PII entity visibleValues to string[] for strict build typecheck
TheodoreSpeaks
committed
fix(logs): redact error/trigger/executionState; keep guardrails import lazy
TheodoreSpeaks
committed
refactor(logs): drop per-workspace retention override; PII redaction stays org-scoped
TheodoreSpeaks
committed
fix(logs): redact oversized strings and executionData.environment
TheodoreSpeaks
committed
refactor(logs): single-scope PII rules with most-specific-wins resolution
TheodoreSpeaks
committed
feat(logs): default + workspace-overrides UI for PII redaction
TheodoreSpeaks
committed
improvement(logs): clearer default/overrides PII UI
TheodoreSpeaks
committed
fix(guardrails): handle stdin EPIPE in PII python spawns
TheodoreSpeaks
committed
fix(logs): redact executionData.correlation
TheodoreSpeaks
committed
fix(logs): enforce unique PII rule scope server-side
TheodoreSpeaks
committed
fix(logs): re-hydrate data-retention form on org switch
TheodoreSpeaks
committed