Request path
Agent → Scrubber → Session Map → Upstream → Reinjector → Agent.
Trust
Security Architecture
Available nowAegis keeps original values inside the application boundary and gives Upstream only Placeholders.
Evidence path
Wire Tap records post-scrub bytes, while telemetry records safe counts and timings.
Failure path
Scrubbing and pre-Upstream state failures block; reinjection state loss preserves Placeholders.