Struct Sensitive 

pub struct Sensitive<T: Zeroize>(/* private fields */);

A secret value, redacted in Debug/Display and zeroized on drop.

Never derive or implement Serialize on a type embedding this — that is the point: Sensitive deliberately has no Serialize impl, so a container that tries to derive one over a field of this type fails to compile instead of silently emitting the raw secret.

Deserializing (reading a secret in from TOML/env/CLI) is fine and supported via serde’s Deserialize — only the write-out direction is closed.

Implementations

impl<T: Zeroize> Sensitive<T>

pub const fn new(value: T) -> Self

Wraps value; ordinary Debug/Display no longer print it.

pub const fn expose(&self) -> &T

Returns the wrapped value. The explicit name makes every read site grep-able (rg '\.expose\(') and visibly intentional.

The borrow this returns stays covered by Sensitive’s redaction and zeroize-on-drop, but nothing stops a call site from cloning it out — e.g. handing an owned String to an LLM provider client, which then holds its own untracked, un-zeroized copy for as long as that client lives. Closing that gap needs polyc-llm’s provider trait to accept Sensitive directly rather than a plain String; tracked as a follow-up, not yet done.

pub const fn expose_secret(&self) -> &T

Alias for Self::expose, matching the secrecy crate’s accessor name for call sites migrating between the two wrappers. Same past-this-point caveat: see Self::expose.

Trait Implementations

impl<T: Clone + Zeroize> Clone for Sensitive<T>

fn clone(&self) -> Sensitive<T>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<T: Zeroize> Debug for Sensitive<T>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de, T> Deserialize<'de> for Sensitive<T>

where T: Deserialize<'de> + Zeroize,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl<T: Zeroize> Display for Sensitive<T>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<T: Zeroize> Drop for Sensitive<T>

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.

impl<T: Zeroize> From<T> for Sensitive<T>

fn from(value: T) -> Self

Converts to this type from the input type.