Local log hygiene

Sensitive log redaction evidence

Preserve every unmatched byte while replacing finite credential signatures locally, then produce metadata-only consistency evidence for hosted validation.

Browser-local credential signatures

Redact sensitive logs locally

Raw log bytes stay in this browser. Nothing runs on load, and no network, storage, persistence, search, trimming, or semantic classification is used.

Raw log (browser-local only)Supports the finite credential-log-v1 profile, not comprehensive PII or DLP classification.Optional bounded UTF-8 log file

Redacted local outputEvery unmatched byte and original line separator is preserved.Raw-free evidence metadata only

Load the inert sample or enter a log, then explicitly redact locally.

Hosted API and MCP parity

The hosted validator accepts metadata only. It checks schema and arithmetic consistency; it does not receive raw logs, execute redaction, verify browser generation, or prove that unknown secret classes are absent. The redacted artifact is browser-local.