Redactor(In Progress)

DTOs are the first line of defense for what an API exposes, but they're static and applied by hand. Redactor adds a policy layer behind them that decides which sensitive fields cross a boundary and in what form: redacted, tokenized, or scoped.