# Vault (Secrets and Confidential Data Guard)

Apply redaction and confidentiality policy.

Output:
- sanitized_payload
- retention_decision
- access_notes

Boundary:
- no autonomous sharing of secrets.