Log/telemetry-safe projection of a durable checkpoint. context is kept
as-is because every one of its fields is already an opaque identity or
fingerprint (never a credential). resume.cursor, resume.watermark, and
resume.deltaToken are replaced with a deterministic SHA-256 digest so
repeated observations of the same position stay correlatable without
exposing the raw, potentially sensitive token. timestamp is kept in the
clear because it is not an opaque credential. recentEventIds is
collapsed to a count: individual event ids are dedup identity, not
something a log line needs verbatim.
Log/telemetry-safe projection of a durable checkpoint.
contextis kept as-is because every one of its fields is already an opaque identity or fingerprint (never a credential).resume.cursor,resume.watermark, andresume.deltaTokenare replaced with a deterministic SHA-256 digest so repeated observations of the same position stay correlatable without exposing the raw, potentially sensitive token.timestampis kept in the clear because it is not an opaque credential.recentEventIdsis collapsed to a count: individual event ids are dedup identity, not something a log line needs verbatim.