Log Sensitivity

Product-enforced / product behavior #

• Hosting events sent to Manager are category-safe (no raw payload / customer IPs expected).
• AI Preview redaction defaults on (usernames, private IPs, hostnames) and must stay on when AI is enabled.
• Hosting units rate-limit journald.
• Login handler must not echo passwords (do not log request bodies).

Operator recommendation #

• Do not paste JWT, license keys, 2FA secrets, backup passphrases, or agent.identity into tickets.
• Treat PostgreSQL dumps as confidential.
• export_audit_logs.sh output is confidential.
• Virtualization security logs do contain source IPs — handle as PII/ops-sensitive depending on jurisdiction. This package makes no compliance claim.

Not certified #

Exactly-once delivery is not guaranteed. Public retention SLA.

Related #

• Logs
• Signals