'ab|.*' compiled and carried the accepted 'ab' literal prefix while its '.*' branch stayed unprefixed, escaping the no-redact-everything guarantee (_extract_literal_prefix stops at '|'). Registration now rejects top-level alternation with a regression test for exactly that shape; grouped alternation after the prefix, escaped pipes, and character-class pipes remain accepted. The bundled nvapi-redaction reference plugin is removed per repo policy (vendor integrations ship as standalone plugin repos); the end-to-end register() coverage now uses a synthetic plugin written at test time. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PnMCvi2vXqfs996AjVeF2F