pub fn redact_body(raw: &str, preview: Preview) -> Option<String>
§9.2 body policy: first line, sanitized, truncated, and replaced wholesale when it trips the same credential/destructive keyword list the jekt tier gate uses.