Prompt-sanitizer runs entirely in-process: no cloud calls, no telemetry, no outbound dependency on third-party redaction APIs. In FAST mode it stays lean with zero ML dependencies. In SMART and FULL modes it adds fully local NER for names and organizations, plus bidirectional deanonymization, synthetic replacements, and audit logging.
