This has been open well past the review deadline. After this discussion and some offline conversations, the proposal is not accepted in its current form.
There are a few things to explore in a future revised version:
- Whether the
Loggingmodule should provide a generic mechanism for metadata value attributes, with concrete attributes living outside of it. - A better name than "privacy" — as this discussion surfaced, it carries connotations of a hard security guarantee that this particular feature doesn't provide.
Thanks everyone for the patience and the thorough discussion.