Log the Shape, Not the Payload

The leak you end up paying for is rarely the request body; it is the log line the request left behind. Outbound traffic gets a threat model, a reviewer, and a d