Redaction
How PermitGraph handles sensitive values in findings and proof packs.
What this is
Redaction prevents raw secrets and sensitive values from being emitted in shared artifacts.
When to use it
Use it before exporting proof packs, opening reports in shared channels, or publishing demo artifacts.
Command or example
python3 tools/export_dashboard_snapshot.py --proof-packOutput to expect
Proof packs copy allowlisted artifacts and apply redaction before export.
How to interpret it
Evidence may include secret variable names when needed for risk explanation. It should not include raw secret values.
Common mistakes
- Committing
.envor generated.agent-permit/artifacts. - Sharing full run folders instead of proof packs.
- Assuming redaction removes all business-sensitive context.