Interface ISensitiveContentDerivationTelemetry

Namespace

MailFathom.Application.SensitiveContent.Derivation

Assembly

MailFathom.Application.dll

Reports what redacting one derived write found and what it cost, without reporting any of it.

public interface ISensitiveContentDerivationTelemetry

Remarks

The derived path is measured apart from the guarded egress points rather than as a fourth one of them, because the two answer different operational questions. An egress figure says what a request is paying while somebody waits for it; this one says what synchronization and the backfills are paying to fill a mailbox, which is where a scan budget is actually spent on a deployment that has just switched a scanner on.

Nothing recorded through this port is mail or derived from it. A category name, a scanner name, a count, a character count, and a duration are all it carries — never the detected value, the text it sat in, or the message it came from, each of which would put the credential in the telemetry written to prove it was removed.

Methods

RecordDerived(RedactedText, TimeSpan)

Records one text redacted on its way into the derived store.

RecordRefused(SensitiveContentScannerKind)

Records one derived write refused because the scanner guarding it could not answer.