Field names whose values get redacted before a log payload ships, regardless of which entry point produced it (ControllerAudit, emit/2, monitor/4's original_record:/params: diffing, schema-level Diff). Matched case-insensitively against both atom and string map keys.

Override entirely (this replaces the defaults, it doesn't add to them — include what you still want redacted):

config :audit_trail, sensitive_fields: ~w(password token my_app_secret)

Returns the configured storage adapter.

Can be:

• An atom: AuditTrail.Adapters.Loki
• A tuple: {AuditTrail.Adapters.Postgres, repo: MyApp.Repo}

Defaults to AuditTrail.Adapters.Loki.