A distributed workflow needs a localized repair without weakening observability or rollback safety. The affected area is cache boundary.
Repair the cache boundary sensitive records implementation so it redacts configured sensitive fields without mutating unrelated values.
Evidence
- Affected surface: Full-stack backend focus / cache boundary.
- Observed failure family: redact sensitive fields.
- Scope policy: retained must equal true.