name	redaction-validator
description	Test that a new or modified redaction rule fires on the target pattern without matching any preserved token.

Redaction Validator

Use when adding or modifying a rule in src/services/redaction/rules/; when debugging a false-positive redaction report.

Adding a rule to a standalone file outside RULE_CATEGORIES — ALL_RULES won't include it.
Using a callback replacement — the interface only allows literal string replacements.
Not running auditRulesAgainstFixtures against PRESERVED_TOKENS after adding the rule.
Missing the global g flag on the regex — single-match patterns leave duplicates.
Not checking whether the rule matches source_path, sessionId, rowid, or other identity keys in PRESERVED_TOKENS.

name	redaction-validator
description	Test that a new or modified redaction rule fires on the target pattern without matching any preserved token.

Use when adding or modifying a rule in src/services/redaction/rules/; when debugging a false-positive redaction report.

Adding a rule to a standalone file outside RULE_CATEGORIES — ALL_RULES won't include it.
Using a callback replacement — the interface only allows literal string replacements.
Not running auditRulesAgainstFixtures against PRESERVED_TOKENS after adding the rule.
Missing the global g flag on the regex — single-match patterns leave duplicates.
Not checking whether the rule matches source_path, sessionId, rowid, or other identity keys in PRESERVED_TOKENS.

redaction-validator