Policy knob

Set at request time:
{
  "policy": {"pii_redaction": "auto"}
}

Per-memory sensitivity

Write memories with sensitivity: pii to force masking.

Detecting redaction

Responses include a redaction block when masking is applied.