← All sheets
GL-R-039Sheet 039AS BUILTR · RECORD · AS BUILT

Production-ready is a number, not an adjective.

AS BUILT · THE EVIDENCE · REDACTION ENGINE · 0.7.0

Drawing sheet 039: Production-ready is a number, not an adjective.

General notes

  1. 01These are the numbers behind the word. Each is produced by a command anyone can run against the public repository.
  2. 02One runtime dependency, because every dependency is a boundary to watch. Zero unsafe patterns, because a regex is code. If a number here is wrong, the repository is one click away.

Schedule of evidenceAs of the current release

MeasureValueHow to check
Tests passing199npm test
Regex patterns · unsafe212 · 0static ReDoS scan in CI
Runtime dependencies1package.json
Module formatsESM · CJS · browser entrypackage exports
Streaming safetyChunk-boundary teststhe test suite

As posted

"Production-ready" is an adjective until you attach a number to it. Then it becomes a claim you can check.

Here are the numbers behind the word for the redaction library I maintain. Each comes from a command anyone can run against the public repository.

199 tests passing. Tests are cheap to write and expensive to fake, which is why they are the first thing I look for in anyone else's library too.

212 detection patterns, zero unsafe. A regular expression is code. A badly written one can be made to run for minutes on a crafted input. Every pattern is bounded, and a static scan re-checks them on every push.

One runtime dependency. Every dependency is a boundary I have to watch, so there is exactly one, for phone-number parsing, and it earns its place.

Three module formats. ESM, CommonJS, and a browser entry that runs the same engine in an extension or a sandbox with no server involved.

Chunk-boundary tests for streaming. The bug that almost shipped in version one was a card number split across two chunks. The test that would have caught it now runs on every change.

None of this is a benchmark. I do not publish benchmarks, because I have not built one I would trust yet.

If a number here is wrong, the repository is one click away. I would rather be corrected than believed.

Sheet 039. As built.

Read with

  • Sheet 014 · 212 regexes. Zero that can hang your server.
  • Sheet 019 · (415) 555-0142 is invisible to most redaction.
  • Sheet 029 · Redaction that breaks your JSON is a second bug.