Privacy-Preserving Data Pipelines

Where to put redaction so that every later stage inherits it, how to keep redacted text usable, and the surfaces that keep a copy after you thought you had removed it.