Stripping the body before any logging directly addresses the team's PII compliance rule. This is the strongest and most critical aspect of the plan and is correctly prioritized.
Body excluded; only correlationId and HTTP status are logged.
decided 2h ago