Repository navigation
Privacy gateway: PII/secret redaction before context leaves the machine #295
Description
Inspired by UiPath's in-flight PII masking, LocalAI's privacy-filter.cpp, and Open WebUI Pipelines.
A deterministic filter layer (not a prompt) on outbound agent traffic: redact secrets, personal data, and configured patterns from context before it goes to a cloud provider, with per-provider policies (e.g. stricter for third-party models, off for local). Log what was redacted per thread. Pairs with the secret-placeholders issue and the governance layer (#262).
Activity
currentbits commentedon Aug 18, 2026
Round 20 intel: Codex CLI 0.147.0 now redacts secrets and complete bearer tokens from displayed commands and replayed conversation history (#36893/#36908), and Copilot CLI redacts AHP connection tokens from every status/error/session-list surface. The pattern to copy: redaction is applied at render time on the live transcript, not only at export time (#394 covers export). Users screen-share, screenshot, and stream their terminals constantly; a token that never reaches the model can still leak through the UI. Solenta should redact known secret shapes (and anything matching configured secret placeholders, #289) in the tool-call card renderer.
currentbits commentedon Aug 19, 2026
Codex CLI 0.147.0 added the cheapest useful slice of this: "secrets and bearer tokens are now redacted from displayed commands and replayed conversation history" (release).
Note where the redaction happens — not on the outbound context (this issue's scope), but on what the UI renders and what gets replayed on resume. That is a different surface with different consumers, and Solenta has all three of them:
A single redactor applied at the render/serialize boundary covers the demo-screenshot leak and the export leak at once, and it does not need the model-side risk analysis this issue's gateway does. Worth splitting out as the shippable first half.
Related: #289 (secret placeholders — prevents the agent seeing it at all), #543 (credentials at rest), #394 (redacted export).
currentbits commentedon Oct 19, 2026
Landed from Solenta thread "Fork: Privacy gateway: PII/secret redaction before context l". Closed on merge.
Redact secrets and personal data from prompts before they reach a clo…