From 6049f4396ef792147e02edfc5e2b474dec6f8a83 Mon Sep 17 00:00:00 2001
From: Eugene Bobukh <eugenebo@microsoft.com>
Date: Thu, 23 Jul 2026 16:23:04 -0700
Subject: [PATCH] Bug fix for redacted keyword_recall metrics

---
 python/src/beval/reporter.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/python/src/beval/reporter.py b/python/src/beval/reporter.py
index f5ad811..9b57252 100644
--- a/python/src/beval/reporter.py
+++ b/python/src/beval/reporter.py
@@ -47,8 +47,9 @@
 }
 
 # Patterns identifying sensitive keys for scrubbing (§10.1).
+# Excludes keyword_recall and keyword_recall_stderr via negative lookbehind.
 _SENSITIVE_KEY_RE = re.compile(
-    r"(secret|password|token|key|credential|auth|api.?key)",
+    r"(?<!keyword_re)(secret|password|token|key|credential|auth|api.?key)",
     re.IGNORECASE,
 )
 _REDACTED = "***REDACTED***"