A distributed workflow needs a localized repair without weakening observability or rollback safety. The affected area is outbox worker.
Repair the outbox worker sensitive records implementation so it redacts configured sensitive fields without mutating unrelated values.
Evidence
- Affected surface: Full-stack backend focus / outbox worker.
- Observed failure family: redact sensitive fields.
- Scope policy: region must equal eu-west.