Under the hoodTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
Secret ScrubbingArea: what it touches
Internal ChangesKind: in v2.1.286,
Internal ChangesSection of the release
What
Redaction means hiding secrets such as passwords and tokens before text is written to a log. Two of the patterns Claude Code uses for this used to be fixed:
values after words like secret, key, token, password or credential
Bearer tokens
Each part of Claude Code that asks for redaction now supplies these two patterns itself. Redaction of credentials inside URLs, of values starting with sk-ant-, and of JWT tokens is unchanged.
Why
What gets hidden in a log can now differ depending on which part of Claude Code wrote it.
How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtWhich patterns each part of Claude Code passes in, and whether any hide less than before.