Expand description
Masking of sensitive values (passwords, tokens) — agent-safe.
Rule (GAP-SSH-SEC-002): always returns "***", without exposing prefix/suffix.
Performance: returns &'static str (zero heap). Callers that need owned
values can .to_string() / .into() at the edge — never allocate in the
mask path itself (Rules Rust: treat every allocation as measurable cost).
Constants§
- FIXED_
MASK - Fixed placeholder for any sensitive value.
Functions§
- mask
- Masks a sensitive value without leaking useful characters.