[ajianaz]

What

Reporting of the privacy filter outside HTTP. uteke remember prints which kinds were masked and its --json output gains redacted; uteke import prints masked and rejected row counts (the --json result already carries the new counters). uteke_remember over MCP says what was masked in its result; in strict mode uteke_remember and uteke_update fail with a tool error that starts with secret_detected: and names the kinds, never the value (the MCP counterpart of the HTTP 400 from #1509). New helper RememberOutcome::redaction_summary.

Why

Last piece of #1464 part 2b-2: a user or agent has to be able to tell that the stored text differs from what was sent, and why a strict write failed. Refs #1464.

Testing

• clippy -D warnings, fmt, cargo test --workspace pass; cargo run -p docgen changes nothing
• new tests: 2 MCP tests (masked note; strict error for remember and update, value not echoed) and a core test for redaction_summary

[github-actions]

🔍 Cora AI Code Review

✅ No issues found. Code looks good!

---

Review powered by cora-code · BYOK · MIT