Mask padded credentials as sent to providers

2026-11-10 20:29:59 +00:00
parent bbac312b32
commit 8a2a19ccd3
4 changed files with 48 additions and 1 deletions
--- a/docs/roadmap/remediation.md
+++ b/docs/roadmap/remediation.md
@@ -352,6 +352,8 @@ still produces normalized output without provider calls.

 ## R10 — P2: Mask the Credential Value PromptKit Actually Sends

+**Status:** Completed. Redaction now includes the raw and trimmed forms of referenced credential values. A local provider regression echoes both forms and checks retained diagnostics, reports, and command output.
+
 **Category**

 Credential normalization and diagnostic redaction disagree in Stage 4.