What it may solve
Irreversible secret-scrubbing guard: rewrites access keys, bearer tokens, and private key blocks into `[REDACTED:<category>]` placeholders before they reach the session log and the model.
Imported third-party catalog description; not a Registry verification conclusion.