Redaction and Secrets

AI provider calls must be server-side and must never expose API keys to the frontend.

Redact before provider calls

Redact authorization headers, bearer tokens, NVIDIA keys, OpenAI keys, Stripe secrets, webhook secrets, JWTs, passwords, refresh tokens, SCIM tokens, and generic credential fields.

Do not echo secrets

If a customer sends a secret, do not repeat it in the support draft. Advise rotation when appropriate.

Metadata only

Audit logs should record provider, model, latency, status, token usage, output length, context length, and source doc IDs. Do not audit raw provider prompts or secrets.

Fallback

If provider configuration is missing, disabled, timed out, or errors, use deterministic fallback and record the fallback reason.