ADR-071: Log redaction
Estado
Accepted — 2026-08-23
Decisión
Complementa ADR-028.
Nunca en logs (ni Sentry breadcrumbs): password, JWT, refresh, mailbox tokens, ENCRYPTION_KEY, cuerpos de email, Authorization header.
Permitido: organizationId, userId, invoiceId, requestId, jobName, error.code, latency, modelVersion, token counts.
Serializer del logger enmascara keys que matcheen /password|token|secret|authorization|cookie|email_body/i.
Nivel default local: debug. Staging/prod: info. PII en debug local solo en fixtures.