[
 {
  "id": "C01",
  "http_status": 200,
  "recorded_at": "2026-11-03T23:18:23+00:00",
  "ms": 0,
  "reply": {
   "slug": "pii-redactor",
   "title": "Redact PII and secrets from a log line",
   "status": "ok",
   "input": "User jane.doe@acme.com (SSN 123-45-6789, card 4111 1111 1111 1111) called from 415-555-0199 with key AKIAIOSFODNN7EXAMPLE",
   "total_ms": 37,
   "steps": [
    {
     "call": "POST /redact",
     "request": {
      "text": "User jane.doe@acme.com (SSN 123-45-6789, card 4111 1111 1111 1111) called from 415-555-0199 with key AKIAIOSFODNN7EXAMPLE"
     },
     "status": 200,
     "ms": 19,
     "reply": {
      "redacted_text": "User [EMAIL_REDACTED] (SSN [SSN_REDACTED], card [CARD_REDACTED]) called from [PHONE_REDACTED] with key [AWS_KEY_REDACTED]",
      "total_redacted": 5,
      "patterns_found": [
       {
        "type": "AWS_ACCESS_KEY_ID",
        "count": 1
       },
       {
        "type": "EMAIL",
        "count": 1
       },
       {
        "type": "SSN",
        "count": 1
       },
       {
        "type": "PAYMENT_CARD",
        "count": 1
       },
       {
        "type": "PHONE",
        "count": 1
       }
      ],
      "known_pii_patterns_fully_redacted": true,
      "residual_matches": 0,
      "disclaimer": "This tool redacts text that matches known PII/secret patterns (email, SSN, phone, payment card, password, API key, secret key, bearer token, AWS credentials). Payment cards are matched only when they pass a Luhn checksum AND carry a real issuer prefix, so card-length numbers that aren't cards (invoice and order numbers) are deliberately left intact. It is not a legal compliance certification: GDPR/EU AI Act compliance depends on factors outside a text scanner's visibility (legal basis for processing, retention policy, data minimization, DPIA, PII types this pattern set doesn't cover -- notably personal NAMES and POSTAL ADDRESSES in free text, which this tool does not detect at all). Only the specific claim 'known_pii_patterns_fully_redacted' below is independently verified, by re-scanning the output for the same patterns."
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 },
 {
  "id": "C02",
  "http_status": 200,
  "recorded_at": "2026-11-03T23:18:23+00:00",
  "ms": 0,
  "reply": {
   "slug": "pii-redactor",
   "title": "Redact PII and secrets from a log line",
   "status": "ok",
   "input": "User jane.doe@acme.com (SSN 123-45-6789, card 4111 1111 1111 1111) called from 415-555-0199 with key AKIAIOSFODNN7EXAMPLE",
   "total_ms": 37,
   "steps": [
    {
     "call": "POST /redact",
     "request": {
      "text": "User jane.doe@acme.com (SSN 123-45-6789, card 4111 1111 1111 1111) called from 415-555-0199 with key AKIAIOSFODNN7EXAMPLE"
     },
     "status": 200,
     "ms": 19,
     "reply": {
      "redacted_text": "User [EMAIL_REDACTED] (SSN [SSN_REDACTED], card [CARD_REDACTED]) called from [PHONE_REDACTED] with key [AWS_KEY_REDACTED]",
      "total_redacted": 5,
      "patterns_found": [
       {
        "type": "AWS_ACCESS_KEY_ID",
        "count": 1
       },
       {
        "type": "EMAIL",
        "count": 1
       },
       {
        "type": "SSN",
        "count": 1
       },
       {
        "type": "PAYMENT_CARD",
        "count": 1
       },
       {
        "type": "PHONE",
        "count": 1
       }
      ],
      "known_pii_patterns_fully_redacted": true,
      "residual_matches": 0,
      "disclaimer": "This tool redacts text that matches known PII/secret patterns (email, SSN, phone, payment card, password, API key, secret key, bearer token, AWS credentials). Payment cards are matched only when they pass a Luhn checksum AND carry a real issuer prefix, so card-length numbers that aren't cards (invoice and order numbers) are deliberately left intact. It is not a legal compliance certification: GDPR/EU AI Act compliance depends on factors outside a text scanner's visibility (legal basis for processing, retention policy, data minimization, DPIA, PII types this pattern set doesn't cover -- notably personal NAMES and POSTAL ADDRESSES in free text, which this tool does not detect at all). Only the specific claim 'known_pii_patterns_fully_redacted' below is independently verified, by re-scanning the output for the same patterns."
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 }
]