Module token_redaction 

std/oauth/redaction (OA-06) — OAuth token redaction stdlib.

Lets scripts register custom redaction patterns alongside the built-in OAuth token catalog, probe whether a given string would be scrubbed, and drain the per-thread audit ring for compliance reporting.

The actual redaction happens at READ/SERIALIZE time on the four sinks (transcript events, audit receipts, OTel span attributes, system reminders) via crate::redact::RedactionPolicy. Every redaction synchronously records a crate::redact::RedactionEvent in a per-thread ring; this module exposes the ring drain plus an optional process-wide async forwarder that appends events to the audit.token_redaction event-log topic.

Functions

ensure_audit_sink

Install the process-wide audit forwarder that pushes each redaction event to: