Secret redaction

Technique that replaces sensitive values (API keys, tokens, credentials) with a placeholder before the text reaches the model or a log. It is reversible when the value→placeholder mapping is kept in a vault, and becomes irreversible (or reject) when the secret is unknown. It is the core mechanism of redaction gateways that protect LLM agents.