[REDACTED] object parsing silently strips unknown keys, defeating reject-on-forbidden-field security guards

Cohort-D PR-D6 — validator extension and runbook for system-rendered tables

Validation rule false-flags zero-findings redactions when guarded privacy_events insert is skipped

[redacted:name] plugin.json manifest validation fails on CC ≥2.1.123 when agents/commands arrays present