Error text sent for diagnostics is now cut down much more aggressively before it leaves.
What's wrong with this entry?
Errors sent for diagnostics now have far more removed from them: failed process launches are cut off at the error code, command failure, timeout and cancellation messages are truncated, anything after Executable not found in $PATH: is dropped, and allowed/blocked domain messages are trimmed generally.
- The launch-failure list now covers the full set of system error codes from
EACCESthroughEXFULL, plusUNKNOWNand "Unknown system error". - AWS resource identifiers are no longer blanked wholesale: a structured replacer keeps the partition, service and region while removing the rest, and a second pattern covers wildcarded policy identifiers.
Executable not found in $PATH:
Strings lifted out of the shipped bundle, so the claim above can be checked against them.