Table of Contents

Class SensitiveContentEgressTelemetry

Namespace
MailFathom.Infrastructure.Observability
Assembly
MailFathom.Infrastructure.dll

Reports what guarding each egress point found, refused, and cost.

public sealed class SensitiveContentEgressTelemetry : ISensitiveContentEgressTelemetry
Inheritance
SensitiveContentEgressTelemetry
Implements
Inherited Members

Remarks

The egress point is on every instrument because it is what an operator acts on. "Something was redacted" says nothing; a scanner finding credentials in retrieved extracts and nothing in subjects, or adding two seconds to a listing and nothing to an embedding call, is where a category list or a bound gets changed.

Nothing recorded here is mail or derived from it. The tags are an egress point, a category name, and a scanner name, all three of them MailFathom's own closed sets, and the values are counts and durations — never a rule's match, a position, a message identity, or any part of what was found, each of which would put the credential in the telemetry written to prove it never left.

Constructors

SensitiveContentEgressTelemetry()

Initializes the instruments every guarded egress reports through.

Methods

RecordGuarded(SensitiveContentEgressPoint, RedactedText, TimeSpan)

Records one text that passed a guard, whatever the guard had to remove from it.

RecordRefused(SensitiveContentEgressPoint, SensitiveContentScannerKind)

Records one egress refused because the scanner guarding it could not answer.