How does it handle “unredaction” in responses? E.g. let’s say the LLM does something with the document. You redacted its input, so it emits redacted content. Now what?

The way I handled it is by assigning the redacted tag an id which gets translated back to the saved PII in the output.