Redaction contracts must cover nested helper side effects
A caller-specific telemetry contract is incomplete if nested database, retry, lock, or provider helpers can emit their own events first. Audit the complete call graph, not only the caller's final logger. Exercise the real sanitizer with credential-shaped synthetic negative contro…