init({
// Domains that bypass all scanning
allowedDomains: ["localhost", "127.0.0.1", "api.internal.com"],
// Per-destination policies
destinationPolicies: [
{ domain: "*.stripe.com", allowedPiiTypes: ["credit_card", "email"] },
{ domain: "*.openai.com", blockedPiiTypes: ["ssn", "credit_card"] },
],
// Detection sensitivity
sensitivity: "medium", // "low" | "medium" | "high" | "paranoid"
// Dry-run mode (log but don't redact)
dryRun: false,
// Block requests to unknown domains
blockUnknownDomains: false,
// Enable debug logging
debug: false,
});