kCorrelationAllowlist top-level constant

Set<String> const kCorrelationAllowlist

Exact (case-sensitive) AllStak wire field names that are non-secret correlation identifiers and must survive scrubbing. The release-health sessionId is the canonical example: the backend's error consumer keys off it to mark a session errored/crashed, so it MUST reach the wire raw.

This is intentionally an exact, case-sensitive match on AllStak's own camelCase field names — it does not loosen the substring denylist for arbitrary user-supplied keys. A user field literally named sessionid, session_id, or session_token is still redacted by the denylist.

Implementation

const Set<String> kCorrelationAllowlist = <String>{
  'sessionId',
};