Redact returns a redacted version of the supplied item that is safe to use in anonymized reporting.

Safe wraps the given object into an opaque struct that implements SafeMessager: its contents can be included as-is in PII-free strings in error objects and reports.

WithSafeDetails annotates an error with the given reportable details.

SafeMessager is implemented by objects which have a way of representing themselves suitably redacted for anonymized reporting.