Pure checks for Evidence Redaction

Verification Boundary

The suite checks deterministic module behavior and declared configuration using local inputs.

What This Suite Proves

Redaction preserves ordinary text and replaces credentials. Combined bindings require every named suite; a component assertion alone does not establish the full experiment.

What It Does Not Prove

These checks do not establish database transactions, deployed permissions, provider availability or a complete user journey.

Real Dependencies and Test Doubles

The production redaction pass and credential patterns are real. Literal payloads supply ordinary text and credentials.

Must Not Be Doubled

Retain the function, configuration or boundary guard under test and its assertions; replacing them removes the evidence.