The redaction-vs-semantics tradeoff is real and underappreciated. One thing worth considering from a security angle: consistent pseudonymization creates a stable mapping that could itself become an attack surface. If an adversary can infer the mapping (by submitting known entities and observing the tokens), they can reason about the vault contents without direct access. How are you thinking about mapping confidentiality?