[R8.1] Consumer-side data minimization for artifacts and logs

[a-a-k]

Context

Epic: R8. Security, privacy, and compliance

Scope

Implement consumer-side data minimization for model/report artifacts and logs in Sheaft.

Definition of Done

• Sensitive fields are redacted/filtered in outputs and logs where configured.
• Retention/export guidance for artifacts is documented and tested.

Note

Raw trace redaction/discovery-side minimization is owned upstream by Bering.

[a-a-k]

Progress update (March 3, 2026)

Status: Not started (0%)

Implemented so far

• No dedicated data-minimization/redaction policies implemented yet.

Remaining to close this issue

• Implement PII/secret redaction policies and tests in ingestion/reporting flow.

[a-a-k]

Second-pass pivot update (March 3, 2026): status = planned. Scope updated to consumer-side artifact/log minimization; implementation not started.