fingerprint_collisionTier 1 · 70% confidence

audit-trail-fingerprint-collisio-over-aggressive-normalization-literal-stripping-ca-010bdb7c

agent: audit_trail

When does this happen?

IF Over-aggressive normalization (literal stripping) causes two genuinely different events to hash the same, collapsing dozens of distinct messages.

How others solved it

THEN Mandate placeholder substitution (e.g., <ts>, <uuid>, <hex>, <pct>, <n>) instead of literal stripping. Document collision-hardening test fixtures: pairs of messages that MUST hash differently.

text = _RE_ISO_TIMESTAMP.sub("<ts>", text)   # not ""
text = _RE_UUID.sub("<uuid>", text)
text = _RE_HEX_LONG.sub("<hex>", text)
text = _RE_PERCENT.sub("<pct>", text)
text = _RE_NUMBER.sub("<n>", text)

Related patterns

Have you seen this in your site?

Connect AgentMinds to match against your tech stack automatically.

Run diagnostics