Struct Redaction 

pub struct Redaction {
    pub credential_findings: Vec<CredentialFinding>,
    pub redacted_payload: Option<String>,
}

Optional credential-redaction artefacts attached to an AuditEntry.

Populated when the gateway’s policy engine ran the credential scanner (Stage 6 of PolicyEngine::evaluate) and produced at least one finding. Both fields default to empty / None, matching the legacy code path that constructs entries without scanner output. Redaction::default() passed to AuditEntry::new_with_lineage_and_redaction produces a hash identical to AuditEntry::new_with_lineage with the same base fields, preserving backward compatibility.

Security invariant

Neither field stores the raw secret value. credential_findings holds only the CredentialKind, byte offset, and the [REDACTED:<kind>] label (CredentialFinding’s end field is #[serde(skip)]). redacted_payload holds the sanitised payload returned by ScanResult::redact where every match has been replaced with its [REDACTED:<kind>] label.

Feature gating

Gated on std because CredentialFinding lives in the std-only scanner module. no_std + alloc builds compile AuditEntry without redaction support.

Fields

credential_findings: Vec<CredentialFinding>

All credential / PII findings detected by the scanner. Empty when the scanner found nothing.

redacted_payload: Option<String>

The redacted version of the action payload (raw secret bytes replaced with [REDACTED:<kind>] labels). None when no findings were produced.

Trait Implementations

impl Clone for Redaction

fn clone(&self) -> Redaction

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Redaction

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Redaction

fn default() -> Redaction

Returns the “default value” for a type.

impl Eq for Redaction

impl PartialEq for Redaction

fn eq(&self, other: &Redaction) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for Redaction