Agent-safe pipeline with secret masking
When agents handle user data, mask before any logging or storage - secrets should never reach an LLM or a kv store unredacted.
Full guard pipeline - mask secrets, gate on token budget, prompt, validate output.
Pipeline
cat user-input.txt | vrk mask | vrk tok --check 6000 | vrk prompt --system "Summarise" | vrk validate --schema summary.json