Summary

Adds a self-contained Enterprise Tooling guard for issue #19 that evaluates recorded admin-session replay packages before institutional audit sharing.

The guard checks:

• sensitive replay events have masked/tokenized redaction evidence
• critical admin actions include ticket, reason, and reviewer approval
• raw playback retention is bounded unless legal hold evidence exists
• replay export bundles include audit digest, redaction manifest, and viewer access policy
• shared replay links are restricted to approved reviewer groups and short expiry windows

Demo

• Demo artifact: enterprise-admin-session-redaction-guard/demo.mp4
• Source preview: enterprise-admin-session-redaction-guard/demo.svg
• Demo command: node enterprise-admin-session-redaction-guard/demo.js

Verification

• conda run -n bounty-scibase-ai-19 node enterprise-admin-session-redaction-guard/test.js
• conda run -n bounty-scibase-ai-19 node enterprise-admin-session-redaction-guard/demo.js
• ffprobe -v error -select_streams v:0 -show_entries stream=width,height,duration,codec_name -of default=noprint_wrappers=1 enterprise-admin-session-redaction-guard/demo.mp4

/claim #19