Demo · synthetic input · recorded rule output · 2026-09-09
The password disappears; the project codename remains
Click “Page demo”; choose AI assistant, Partial mask, and set the chunk budget to 1800. All material is synthetic.
Input
Goal: prepare a request about an image export failure. Context: PNG conversion fails in the browser. Email: [email protected] password=demo-only-password Project codename: Blue Heron, not yet public. Constraint: do not upload the original. Output: missing information and local checks.
Actual output
Goal: prepare a request about an image export failure. Context: PNG conversion fails in the browser. Email: r***@example.test password=[REDACTED] Project codename: Blue Heron, not yet public. Constraint: do not upload the original. Output: missing information and local checks.
Full prompt, checklist and chunks
{
"redacted": "Goal: prepare a request about an image export failure.\nContext: PNG conversion fails in the browser.\nEmail: r***@example.test\npassword=[REDACTED]\nProject codename: Blue Heron, not yet public.\nConstraint: do not upload the original.\nOutput: missing information and local checks.",
"prompt": "Use the privacy-checked and redacted context below to complete the task. If key information is still missing, list the questions first; otherwise provide an actionable result. Do not restore or guess redacted values.\n\nProblem / Goal\n- Goal: prepare a request about an image export failure.\n\nContext\n- Context: PNG conversion fails in the browser.\n\nConstraints\n- Constraint: do not upload the original.\n\nExpected Output\n- Output: missing information and local checks.\n\nPrivacy Notes\n- Sensitive field value: line 4\n- Email address: line 3\n\nRedacted source material\nGoal: prepare a request about an image export failure.\nContext: PNG conversion fails in the browser.\nEmail: r***@example.test\npassword=[REDACTED]\nProject codename: Blue Heron, not yet public.\nConstraint: do not upload the original.\nOutput: missing information and local checks.",
"checklist": [
{
"level": "high",
"zh": "发现高风险信号：复制前确认真实凭证、Token、私钥或敏感字段已经被移除，并考虑是否需要轮换。",
"en": "High-risk signals were found: before copying, confirm real credentials, tokens, private keys, or sensitive fields are removed and consider rotation."
},
{
"level": "medium",
"zh": "复核 2 个隐私信号，尤其是邮箱、资源 ID、IP、URL 参数和授权字段。",
"en": "Review 2 privacy signals, especially emails, resource IDs, IPs, URL parameters, and authorization fields."
},
{
"level": "medium",
"zh": "AI 助手模式：确认你的组织或个人规则允许把这类材料发送给目标 AI 服务。",
"en": "AI assistant mode: confirm your organization or personal policy allows sending this material to the target AI service."
},
{
"level": "low",
"zh": "如果输出会公开发布，先复制到草稿区再次阅读，而不是直接发布。",
"en": "If the output will be public, copy it into a draft area and review it again instead of posting directly."
}
],
"chunks": [
{
"text": "Use the privacy-checked and redacted context below to complete the task. If key information is still missing, list the questions first; otherwise provide an actionable result. Do not restore or guess redacted values.\n\nProblem / Goal\n- Goal: prepare a request about an image export failure.\n\nContext\n- Context: PNG conversion fails in the browser.\n\nConstraints\n- Constraint: do not upload the original.\n\nExpected Output\n- Output: missing information and local checks.\n\nPrivacy Notes\n- Sensitive field value: line 4\n- Email address: line 3\n\nRedacted source material\nGoal: prepare a request about an image export failure.\nContext: PNG conversion fails in the browser.\nEmail: r***@example.test\npassword=[REDACTED]\nProject codename: Blue Heron, not yet public.\nConstraint: do not upload the original.\nOutput: missing information and local checks.",
"tokens": 183,
"index": 1
}
]
}Reading the result
The password becomes [REDACTED], while the email keeps an initial and its domain. The unpublished “Blue Heron” codename survives in both the redacted source and the generated prompt. Remove or replace the codename and decide whether the email domain must also be hidden before sharing.
Failures and manual checks
Patterns cannot determine whether contracts, project names or unpublished figures are confidential. Chunking does not guarantee completeness or an exact model token limit. Review every chunk, especially the attached source.
Download all four test records (JSON)