Secret masking
Per-key policy for text requests.
Read the policy
GET /v1/key returns mask_secrets. It is a saved preference, not confirmation that a request was masked. uRouter has no public per-request masking-header override.
Current availability
Protected text execution is disabled. A saved true value does not enable it. The API must be able to confirm masking before protected execution can be released.
Coverage
The intended scope is supported text fields. Images, files, audio, video and embeddings are not covered. Masking credentials is not personal-data anonymization or end-to-end encryption.