4 bundles: filter+truncation, redactors (header/body/SQL-param), wire into all emission paths + health metric, config+perf+safety-net. Vocabulary translation locked: error-row cap (64 KB) on Status NOT IN (Delivered, Submitted, Forwarded). Filter integration point in each writer (FallbackAuditWriter, CentralAuditWriter, AuditLogIngestActor) BEFORE storage call.