Harden prompt debug redaction

2026-08-13 01:19:35 +00:00
parent 27849813db
commit a38d291f63
6 changed files with 148 additions and 45 deletions
--- a/docs/operations.md
+++ b/docs/operations.md
@@ -143,6 +143,10 @@ remain distinct. Normal output, summaries, and routine logs omit that sensitive
 content. Debug capture is never created for an ordinary command without
 `--llm-debug-dir`.

+Preparation captures retain only the provider endpoint origin and reviewed
+execution settings. URL user information, paths, queries, fragments, and
+unrecognized provider parameters are omitted.
+
 If capture creation or writing fails, the affected run fails rather than
 silently continuing without the requested diagnostics.