WB-I-1 — Admin token logged at DEBUG level and shipped to log aggregator

Component: Wallet Backend. Mitigations: Admin token debug logging already suppressed (go-wallet-backend#89). Action: Verify fix is deployed in all production builds

Property	Value
Section	Information Disclosure
Owner	platform

Mapped Controls

Control	Title
SID-AUDIT-02	Privacy-Preserving Audit Event Taxonomy

---

Source: STRIDE analysis (April 2026), architecture/stride-threat-model.md