Concepts
Detection, findings, and policy
Detection reports evidence. Policy decides whether a finding is redacted, blocked, warned, or otherwise handled.
01 · Detection and policy
Keep the layers separate
Adapters and gateways do not decide what a secret is. They carry values into core and enforce the returned result at their boundary.
- Findings identify byte ranges and detector evidence.
- Actions describe the configured response.
- Overlapping findings are resolved deterministically before replacement.
02 · Detection and policy
PII is opt-in and bounded
Credential detection and PII selection are different controls. PII modes cover documented selectors only; Redact Secret is not a general DLP platform.