replacement

The active policy's marker for a value that must never cross a redaction boundary.