Derive Macro Redact 

#[derive(Redact)]
{
    // Attributes available to this derive:
    #[redact]
    #[serde]
}

Derives the borrowing qubit_redact::Redact implementation.

Fields without an attribute intentionally use ordinary Debug formatting. Sensitivity is downstream business-domain knowledge that the macro cannot infer reliably from a field name or Rust type. Ordinary fields are the large majority, so an explicit “not sensitive” attribute on every field would add noise without adding knowledge. Downstream types must explicitly annotate sensitive fields and review that classification when their model changes; strict policy and inspection deliberately do not override this decision.

Supported field modes are:

• #[redact(level = "low" | "medium" | "high" | "secret")] masks every supported scalar leaf while preserving recursive container shape;
• #[redact(nested)] delegates to nested Redact values;
• #[redact(map)] classifies text-keyed map values by key;
• #[redact(json)] recursively redacts supported JSON text values;
• #[redact(skip)] omits the field while redaction is enabled.

Container options #[redact(debug)] and #[redact(display)] generate policy-aware formatting implementations. #[redact(serde)] generates a structured serde::Serialize implementation and requires direct runtime and Serde dependencies. Generated formatting writes enabled-policy text directly for every completion state because it remains confidentiality-safe; callers that require completeness must use the runtime API and inspect its summary instead.

Generated Debug, Display, and Serialize implementations intentionally call qubit_redact::Redactor::application_default() at the start of every formatting or serialization operation. They do not capture a policy when the value is created. Replacing the process-wide application default affects subsequent generated calls, and installing a disabled default deliberately restores source values. Callers own authorization for that global debugging escape hatch. Explicit runtime redactors, composers, and batches retain the policy snapshot with which they were created.

Examples

use qubit_redact::Redactor;
use qubit_redact_derive::Redact;

#[derive(Redact)]
struct Login {
    user: String,
    #[redact(level = "secret")]
    password: String,
}

let login = Login {
    user: "ada".to_owned(),
    password: "raw-secret".to_owned(),
};
let output = Redactor::standard().redact(&login);
assert!(output.text().as_str().contains("ada"));
assert!(!output.text().as_str().contains("raw-secret"));