Module credential_redaction 

Shared deterministic credential redaction used by Local and Via Edge.

This is the provider-independent, configuration-free subset of LeanCTX’s established redaction policy. Callers that need configuration exclusions layer those separately; security boundaries use this default-deny baseline.

Functions

contains_credential

Return true when the established rules would redact any credential material.

redact_text

Apply the established, configuration-free LeanCTX credential rules.