Some data is dangerous because of what it is. And now there is another reader of it.
Personal data
Also called PII
Anything that can be tied to a real person: a name, an email address, a location, an account number. It carries legal duties in much of the world. It gets everywhere, into logs, backups, test databases and, now, an agent's context, which may leave your machine.
Agents log whole request bodies when debugging, seed test databases by copying production, and paste rows into a prompt to reason about them. All of it is helpful, and each one moves personal data somewhere you didn't decide on. A scrubber only catches what has a shape, so name the fields that may leave, and keep the rest out.
“Don't log request bodies. Log only these fields: level, event, order_id, status and ms. Add a test that sends a request with a marker email address and fails if the marker appears in the log output. Use generated fixtures, and never copy production rows into a test or into this conversation.”