Review output redaction
Output redaction has to inspect the produced response, not just the original input. A model may repeat sensitive source material in a new wording or field.
Understand the pattern
Output redaction has to inspect the produced response, not just the original input. A model may repeat sensitive source material in a new wording or field.
Interpret the evidence
Withhold and redact the sensitive output before release.
A tempting mistake
Input redaction alone proves every output is safe.
All names, measurements, prices, versions, and thresholds in this exercise are fictional training data. The evidence supports this bounded scenario, not a claim about a live provider.
Worked example and expected result
$ cat /opt/ai-lab/cases/aiops-safety-governance-003.json{
"fixture": "Fictional training data; not a live measurement.",
"input_redacted": true,
"output_contains_secret": true,
"response_released": false
}Exit status: 0. The command completed successfully in the training fixture.
$ jq .output_contains_secret /opt/ai-lab/cases/aiops-safety-governance-003.jsontrue
Exit status: 0. The command completed successfully in the training fixture.
$ printf '%s\n' 'withhold-sensitive-output' > /home/learner/lab/aiops-safety-governance-003-decision.txt(no output; exit 0)
Exit status: 0. The command completed successfully in the training fixture.
Explain it
Apply it elsewhere
Keep the momentum.
Complete the lab, then explain and apply the pattern.
Next: Locate sensitive fieldsTry an incident drillAnonymous lesson and mastery progress lasts for this session. Sign in to keep synced lesson XP between sessions; mastery stays device-local. No speed bonus, lost lives, or hint penalties.
Keep learning
- 01Review input redactionInput redaction limits sensitive data sent to a model or logged by an application. Verify the resulting payload rather than assuming that a redaction switch caught every field.Practice
- 02Locate sensitive fieldsSensitive-field review depends on context and policy. Distinguish operational metadata from credentials and personal data before exporting a diagnostic record.Practice
- 03Check data retentionRetention describes how long data is kept and for what purpose. A retention setting should match policy and actual deletion behavior, not just a label in a form.Practice