What it doesMask secrets before agents send them.Permissionsevent:readprompt:readprompt:writedecision:writemodel:invokeaudit:writesignal:write