Summary

• Redact self-hosted callback logs so token IDs and client IPs are not written to process logs.
• Drop unregistered real-token callbacks before event persistence to match managed Worker behavior and reduce probe-spam noise.
• Validate trusted proxy forwarded IP headers before storing callback metadata.

Tests

• go test -count=1 ./...
• go test -race -count=1 ./...
• go vet ./...
• go build ./...
• (cd worker && npm test)
• (cd worker && npm audit --audit-level=moderate)
• govulncheck ./...
• git diff --check