Security & privacy

Mode	Leaves the process?
`backend="rule"`	No
`backend="onnx"`	No (local file only)
`backend="http"`	Yes — draft text is sent to `base_url`

`redact()`

from vaakly import redact

redact(
    "password=hunter2 token=abc Bearer eyJ….a.b "
    "user@example.com 192.168.1.10",
    emails=True,
    ips=True,
    secrets=True,
    phones=True,
    uuids=False,
)

Covers secret assignments, Bearer / JWT shapes, emails, IPv4, phones. Best-effort — callers remain responsible for compliance policy.

vaakly polish --redact "ERR login password=secret"
vaakly redact "token=abc user@x.com"