# REDACTED

**Kind:** Constant

**Source:** [`atloria-monorepo/apps/api/src/capture/capture.redact.ts`](https://github.com/sherkety/atloria/blob/main/atloria-monorepo/apps/api/src/capture/capture.redact.ts#L13)

Server-side value redaction for captured steps (defense in depth).

The recorder client already redacts sensitive inputs at capture time
(type=password, token/email/card patterns) — but we NEVER trust the client.
Every stored step value is re-scanned here so a secret can never land in the
database even if a tampered/old recorder sends one through.

Moat rule: the recipe (selectors + actions) is the asset — secret VALUES are
not, and are actively harmful to keep. When in doubt, redact.