name = "strict-redaction"
version = "1.0.0"
description = "Baseline plus aggressive secret/token coverage and compact context: for teams handling customer data"
extends = "baseline"
[context]
default_read_mode = "map"
audit_retention_days = 180
[redaction]
jwt = '\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b'
github_token = '\b(gh[pousr]_[A-Za-z0-9]{36,}|github_pat_[A-Za-z0-9_]{60,})\b'
gitlab_token = '\bglpat-[A-Za-z0-9_\-]{20,}\b'
slack_token = '\bxox[baprs]-[A-Za-z0-9-]{10,}\b'
openai_key = '\bsk-[A-Za-z0-9_-]{20,}\b'
anthropic_key = '\bsk-ant-[A-Za-z0-9_-]{20,}\b'
stripe_key = '\b[sr]k_(live|test)_[A-Za-z0-9]{16,}\b'
aws_secret = '(?i)\baws[_-]?secret[_-]?access[_-]?key\b\s*[:=]\s*\S{30,}'
db_url_credentials = '(?i)\b(postgres|postgresql|mysql|mongodb(\+srv)?|redis|amqp)://[^\s:@/]+:[^\s@/]+@'