feat(logs): redact PII from workflow logs via configurable rules - #5136

Merged

TheodoreSpeaks merged 13 commits into

feat/redact-pii-workflow-log

Jun 19, 2026

Commits on Jun 19, 2026

feat(logs): redact PII from workflow logs via configurable rules
TheodoreSpeaks
committed
9df460f
Merge remote-tracking branch 'origin/staging' into feat/redact-pii-workflow-log
TheodoreSpeaks
committed
d9a4dd4
fix(logs): widen PII entity visibleValues to string[] for strict build typecheck
TheodoreSpeaks
committed
147b143
fix(logs): redact error/trigger/executionState; keep guardrails import lazy
TheodoreSpeaks
committed
1635ce1
refactor(logs): drop per-workspace retention override; PII redaction stays org-scoped
TheodoreSpeaks
committed
e5dfe05
fix(logs): redact oversized strings and executionData.environment
TheodoreSpeaks
committed
a5ca0f4
refactor(logs): single-scope PII rules with most-specific-wins resolution
TheodoreSpeaks
committed
b19296c
feat(logs): default + workspace-overrides UI for PII redaction
TheodoreSpeaks
committed
f599a7a
improvement(logs): clearer default/overrides PII UI
TheodoreSpeaks
committed
a0de0f3
fix(guardrails): handle stdin EPIPE in PII python spawns
TheodoreSpeaks
committed
9f2ed1c
fix(logs): redact executionData.correlation
TheodoreSpeaks
committed
7313e18
fix(logs): enforce unique PII rule scope server-side
TheodoreSpeaks
committed
0605fcf
fix(logs): re-hydrate data-retention form on org switch
TheodoreSpeaks
committed
ad7d1fa