v0.2.0

Added

• Pluggable streaming BodyRedactor API with explicit custom-over-built-in precedence.
• Per-request and per-response BodyCapturePolicy decisions.
• Non-sensitive _redaction audit metadata and a detailed Inspector audit view.
• Redact, AES-256-GCM encrypt, and HMAC-SHA-256 tokenize modes with versioned tokens and key IDs.
• Inspector workflows for batch decryption, candidate verification, and explicit decrypted Replay values.

Changed

• Inspector protection operations are grouped by mode and key ID and can process an exchange or an entire HAR.
• Decrypted in-memory values are shown consistently across detail tabs and proxy-aware Replay.
• Replay now has structured options, command, and review panels.
• Built-in and custom body redactors share one single-pass lifecycle; embedded HAR bodies reuse the already-redacted BodyStore representation.

Security

• Capture-policy errors and panics fail closed to metadata-only recording without changing the live HTTP exchange.
• URL-encoded and multipart form values are redacted before reaching memory/file body stores or embedded HAR content.
• Encrypted plaintext values are bounded; tokenization streams through HMAC; protection failures fall back to [REDACTED].
• Inspector keys and plaintext remain session-only, and Replay never consumes decrypted values by default.
• Key-provider and cryptographic failures are reported once per exchange direction with aggregate counts.

See the full changelog for details.