== live redaction test 2026-10-18T10:28:49Z: a fresh fake token (48 hex) sent in a query, a /bind/ path, a session query, a Bearer header, a Cookie, a POST body
lines in today's file: 15
the fake token in the log: 0
control (log + the token appended): 1
secret shapes (Bearer value, 32+ hex/base64 run, password=, token=, session=): 0
control for the shapes on the appended copy: 1
== my test lines (path fields only):
GET /healthz 200 cred=- auth=-
GET /bind/[redacted] 200 cred=- auth=-
GET /configuration 302 cred=- auth=-
POST /login 401 cred=- auth=-
== distinct box sources of /api/v1/report: xff=192.168.0.101 xff=192.168.0.149 xff=192.168.0.155 
