HazyLab 08fbea7a32 fix(redaction): split camelCase keys in normalizeKey (#994) ...

* fix(redaction): split camelCase keys in normalizeKey

A lower-to-upper boundary now inserts an underscore, so accessToken
and refreshToken match the registry instead of leaking into logs.
Token-count fields such as promptTokens stay unredacted.

Fixes #922

* fix(config): replace deprecated reflect.Ptr with reflect.Pointer

* fix(doctor): report auth presence under a non-sensitive key

camelCase normalization treats credentialConfigured as a credential
segment, so check() redacted the set/not-set indicator. authConfigured
does not match the registry.

2026-09-12 08:45:58 +08:00

..

audit_fixes_test.go

fix(redaction): split camelCase keys in normalizeKey (#994)

2026-09-12 08:45:58 +08:00

opaque_auth_test.go

fix model-discovery fallback + redact opaque Authorization tokens (#266)

2026-06-20 10:39:35 +05:30

redaction_test.go

audit: fix isolated remaining findings (redaction, secrets, rune-safety, credential status) (#174)

2026-06-12 12:48:24 +05:30

redaction.go

fix(redaction): split camelCase keys in normalizeKey (#994)

2026-09-12 08:45:58 +08:00