A distributed workflow needs a localized repair without weakening observability or rollback safety. The affected area is audit pipeline.
Repair the audit pipeline sensitive records implementation so it redacts configured sensitive fields without mutating unrelated values.
Evidence
- Affected surface: Full-stack backend focus / audit pipeline.
- Observed failure family: redact sensitive fields.
- Scope policy: contractVersion must equal 2.