cast-redact

Remove sensitive data from an asciicast .cast recording before it is rendered, committed, or shared. Upstream asciinema has no redact command (its official answer is "edit the NDJSON yourself"), and naive sed misses the worst case: a secret typed during recording echoes one character per event, so no single line contains it. The bundled script matches patterns on the joined per-channel stream, scrubs header fields too, and verifies its own output.

Threat model (be honest about it)