Hook-level per-tool redaction policy (issue #24 redact.toolPolicy): when non-empty only these tools are redacted; toolDeny always wins.
redact.toolPolicy
toolDeny
final Set<String> toolAllow;