Class CapturePrivacyClassifier

java.lang.Object

com.shaft.capture.privacy.CapturePrivacyClassifier

public final class CapturePrivacyClassifier
extends Object

Applies deterministic privacy classification before capture data reaches disk.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static final record	CapturePrivacyClassifier.ClassifiedUpload	Safe upload reference and metadata.
static final record	CapturePrivacyClassifier.SanitizedAttributes	Sanitized attributes and safe redaction summary.
static final record	CapturePrivacyClassifier.SanitizedText	Sanitized text and safe redaction summary.

Constructor Summary

Constructors

Constructor	Description
CapturePrivacyClassifier()	Creates a classifier with conservative defaults.
CapturePrivacyClassifier(CapturePrivacyPolicy policy)	Creates a classifier using the supplied policy.

Method Summary

Modifier and Type	Method	Description
CapturePrivacyClassifier.ClassifiedUpload	classifyUpload(String logicalName, String sourcePath, String mediaType, long sizeBytes)	Creates a safe upload reference without retaining an absolute path or file contents.
ClassifiedValue	classifyValue(String logicalName, String rawValue, String selector, Map<String,String> attributes)	Classifies a typed or expected value and creates an external reference.
String	sanitizeArtifactFilename(String sourcePath)	Produces a safe basename for upload or evidence artifacts.
CapturePrivacyClassifier.SanitizedAttributes	sanitizeAttributes(Map<String,String> attributes)	Removes configured sensitive attributes and redacts secret-looking values.
CapturePrivacyClassifier.SanitizedText	sanitizeText(String rawValue)	Redacts configured secret-looking patterns from browser metadata text.
CapturePrivacyClassifier.SanitizedText	sanitizeUrl(String rawUrl)	Redacts configured URL parameters and secret-looking values.

Methods inherited from class Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

CapturePrivacyClassifier

public CapturePrivacyClassifier(CapturePrivacyPolicy policy)

Creates a classifier using the supplied policy.

Parameters:

policy - privacy policy

CapturePrivacyClassifier

public CapturePrivacyClassifier()

Creates a classifier with conservative defaults.

Method Details

classifyValue

public ClassifiedValue classifyValue(String logicalName,
 String rawValue,
 String selector,
 Map<String,String> attributes)

Classifies a typed or expected value and creates an external reference.

Parameters:

logicalName - logical field name

rawValue - original value

selector - optional source selector

attributes - optional source attributes

Returns:

safe classification result

classifyUpload

public CapturePrivacyClassifier.ClassifiedUpload classifyUpload(String logicalName,
 String sourcePath,
 String mediaType,
 long sizeBytes)

Creates a safe upload reference without retaining an absolute path or file contents.

Parameters:

logicalName - logical upload name

sourcePath - source path used only to derive a safe basename

mediaType - safe media type

sizeBytes - safe file-size metadata

Returns:

safe upload classification

sanitizeUrl

public CapturePrivacyClassifier.SanitizedText sanitizeUrl(String rawUrl)

Redacts configured URL parameters and secret-looking values.

Parameters:

rawUrl - original URL

Returns:

sanitized URL and safe summary

sanitizeAttributes

public CapturePrivacyClassifier.SanitizedAttributes sanitizeAttributes(Map<String,String> attributes)

Removes configured sensitive attributes and redacts secret-looking values.

Parameters:

attributes - raw element attributes

Returns:

sanitized attributes and safe summary

sanitizeText

public CapturePrivacyClassifier.SanitizedText sanitizeText(String rawValue)

Redacts configured secret-looking patterns from browser metadata text.

Parameters:

rawValue - original text

Returns:

sanitized text and safe summary

sanitizeArtifactFilename

public String sanitizeArtifactFilename(String sourcePath)

Produces a safe basename for upload or evidence artifacts.

Parameters:

sourcePath - original path or filename

Returns:

sanitized basename without secret-looking content