666076d137
Hardening on top of the salvaged #51642: free-text fields (preview/goal/summary/output_tail) pass redact_sensitive_text(force=True) before leaving on the public /v1/runs SSE stream — same treatment the API already applies to error text — and child_session_id survives the allowlist so clients can correlate the child's session. Both were flagged in the sweeper review of #51642 and unaddressed.