save checkpoint

docs/features/checked/telemetry/redacting-log-processor.md

@@ -0,0 +1,26 @@
+# Redacting Log Processor
+
+## Module
+Telemetry
+
+## Status
+IMPLEMENTED
+
+## Description
+Log processor that redacts sensitive data from telemetry output before export.
+
+## Implementation Details
+- **RedactingLogProcessor**: `src/Telemetry/StellaOps.Telemetry.Core/StellaOps.Telemetry.Core/RedactingLogProcessor.cs` -- OpenTelemetry LogRecordProcessor that redacts sensitive data before export
+- **ILogRedactor interface**: `src/Telemetry/StellaOps.Telemetry.Core/StellaOps.Telemetry.Core/ILogRedactor.cs` -- redaction service interface
+- **LogRedactor**: `src/Telemetry/StellaOps.Telemetry.Core/StellaOps.Telemetry.Core/LogRedactor.cs` -- default implementation with configurable redaction patterns
+- **LogRedactionOptions**: `src/Telemetry/StellaOps.Telemetry.Core/StellaOps.Telemetry.Core/LogRedactionOptions.cs` -- configurable patterns, replacement text, and scope
+- **DeterministicLogFormatter**: `src/Telemetry/StellaOps.Telemetry.Core/StellaOps.Telemetry.Core/DeterministicLogFormatter.cs` -- deterministic log formatting for reproducibility
+- **Tests**: `src/Telemetry/StellaOps.Telemetry.Core/StellaOps.Telemetry.Core.Tests/LogRedactorTests.cs`, `DeterministicLogFormatterTests.cs`
+- **Source**: Feature matrix scan
+
+## E2E Test Plan
+- [ ] Verify log processor redacts PII patterns (emails, IPs, tokens) before export
+- [ ] Test custom redaction patterns are applied via LogRedactionOptions
+- [ ] Verify deterministic log formatter produces reproducible output
+- [ ] Test redaction preserves log structure and does not corrupt JSON output
+- [ ] Verify redaction applies to both log message and log attributes