# Sec Diagnostic Redaction Audit Report V0.9.2.2.1

**Document type:** Security / Diagnostic Redaction Audit Report  
**Version:** 0.9.2  
**Status:** Baseline Candidate  
**Language:** English  
**Product:** Chanora  
**Repo path:** `docs/security/diagnostic-redaction-audit-report.md`  ---

## 1. Purpose

This report records evidence that Chanora logs and diagnostic exports do not leak sensitive information.

## 2. Sensitive Data Redaction Policy

| Data category | Default diagnostic behavior |
|---|---|
| Server password | Must redact |
| Identity private key / identity secret | Must redact |
| Authentication tokens if later added | Must redact |
| Secure-storage keys | Must redact |
| Server address | Redact or minimize according to release policy |
| Channel names | Redact or include only with explicit user consent |
| Client nicknames | Redact or include only with explicit user consent |
| Chat messages | Exclude by default unless a future explicit opt-in policy is approved |
| Local file paths | Minimize or redact user-identifying segments |
| Device IDs | Redact or hash if collected |
| IP addresses | Redact or minimize according to release policy |

## 3. Diagnostic Surfaces

| Surface | Risk | Required control |
|---|---|---|
| Application log | Secret leakage | Redaction filter and structured logging discipline |
| Protocol log | Hostile or sensitive server content | Redaction and length limits |
| Audio diagnostics | Device privacy | Device name minimization if needed |
| Export bundle | Aggregated sensitive data | Redaction audit before release |
| Error report | Stack trace or secret context | User-safe error mapping |
| User support copy/paste | Over-sharing | Explicit review and confirmation |

## 4. Redaction Test Matrix

| Test ID | Input | Expected output | Status | Evidence |
|---|---|---|---|---|
| REDACT-TC-001 | Server password in connection data | Password replaced by `[REDACTED]` | TBD | TBD |
| REDACT-TC-002 | Identity secret in storage error | Secret absent | TBD | TBD |
| REDACT-TC-003 | Server URL with password-like field | Secret part redacted | TBD | TBD |
| REDACT-TC-004 | Chat text in diagnostic export | Excluded by default | TBD | TBD |
| REDACT-TC-005 | Channel name with Unicode | Preserved only if permitted; otherwise redacted safely | TBD | TBD |
| REDACT-TC-006 | Nickname with Unicode | Preserved only if permitted; otherwise redacted safely | TBD | TBD |
| REDACT-TC-007 | Local file path | User-identifying segments redacted or minimized | TBD | TBD |
| REDACT-TC-008 | Diagnostic bundle with mixed sensitive fields | All sensitive fields redacted | TBD | TBD |
| REDACT-TC-009 | Long hostile protocol string | Truncated or safely escaped | TBD | TBD |
| REDACT-TC-010 | Multilingual safe diagnostic text | Unicode preserved | TBD | TBD |

## 5. Export Bundle Contents

| Bundle item | Included? | Redaction rule | Status |
|---|---|---|---|
| App version | Yes | None | TBD |
| Build number | Yes | None | TBD |
| Platform info | Yes | Minimize device details | TBD |
| Connection state | Yes | No secrets | TBD |
| Server address | TBD | Redact/minimize | TBD |
| Channel tree | TBD | Redact/minimize | TBD |
| Chat history | No by default | Exclude unless explicit policy changes | TBD |
| Logs | Yes | Redacted | TBD |
| Audio diagnostics | Yes | No audio content | TBD |
| Secure storage data | No | Never include | TBD |

## 6. Findings

| Finding ID | Severity | Description | Status | Owner |
|---|---|---|---|---|
| TBD | TBD | TBD | TBD | TBD |

## 7. Approval

| Role | Name | Decision | Date |
|---|---|---|---|
| Security Reviewer | TBD | Pending | TBD |
| Privacy Reviewer | TBD | Pending | TBD |
| QA / Verification Owner | TBD | Pending | TBD |

## 8. Change History

| Version | Date | Description |
|---|---|---|
| 0.9.0 | 2026-05-14 | Initial diagnostic redaction audit report template. |


## Baseline Candidate 0.9.1 Update

| Version | Date | Description |
|---|---|---|
| 0.9.1 | 2026-05-14 | Updated baseline after product decision closure: Apple App Store SDK gate uses Xcode 26+ and iOS 26 / iPadOS 26 SDK+ since 2026-04-28, platform baselines and decision traceability propagated across the document set. |


## Baseline Candidate 0.9.2 Update

| Version | Date | Description |
|---|---|---|
| 0.9.2 | 2026-05-14 | Corrected Apple App Store Connect upload gate to 2026-04-28 and checked full-package naming, references, and coverage. |