Unclear It is not clear which patterns use these options or exactly what redact-only changes.
What
Claude Code has a redactor that finds secrets such as keys and passwords and hides them from output. Its rules have changed:
- Each secret pattern can now be marked
redactOnlyand can carry aprefilter, a quick regular expression (a text-matching pattern) checked before the full rule runs. - The methods that redact text in context take a flag that switches the
redactOnlyrules on, and a newredactOnlyRulesmethod exists.
Before this release, all low-confidence rules always ran and there was no prefilter.
Why
This can change which secrets get hidden in a given place, because some rules now run only when asked for. The prefilters let the scrubber skip rules that cannot match, which may make scrubbing faster.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
It is not clear which patterns use these options or exactly what redact-only changes.