Enhance audit evidence and Data Safe scenario

scenarios/07-audit-evidence-data-safe/RUNBOOK.md

@@ -61,13 +61,19 @@ Show how to turn access to sensitive data into auditable evidence using Unified
    @scenarios/07-audit-evidence-data-safe/sql/04_audit_policies.sql
    ```
 
-3. Generate activity and query the local audit trail:
+3. Apply redaction to the payment token column:
+
+   ```sql
+   @scenarios/07-audit-evidence-data-safe/sql/06_redaction_policy.sql
+   ```
+
+4. Generate activity and query the local audit trail:
 
    ```sql
    @scenarios/07-audit-evidence-data-safe/sql/05_generate_activity.sql
    ```
 
-4. In OCI Data Safe:
+5. In OCI Data Safe:
 
    ```text
    Register Target Database
@@ -80,7 +86,7 @@ Show how to turn access to sensitive data into auditable evidence using Unified
 ## Expected Result After
 
 - `payment_operator` sees operational Brazil payment fields without `card_token`.
-- `auditor` sees the data required for review.
+- `auditor` sees the data required for review, with `card_token` partially redacted.
 - `UNIFIED_AUDIT_TRAIL` records access to `DDS_AUDIT_PAYMENTS`.
 - Data Safe collects and presents events in dashboards and reports.
 
@@ -97,4 +103,3 @@ Show how to turn access to sensitive data into auditable evidence using Unified
 - Oracle Deep Data Security Guide: https://docs.oracle.com/en/database/oracle/oracle-database/26/ddscg/index.html
 - CREATE DATA GRANT SQL Reference: https://docs.oracle.com/en/database/oracle/oracle-database/26/sqlrf/create-data-grant.html
 - Configure Data Grants: https://docs.oracle.com/en/database/oracle/oracle-database/26/ddscg/configure-data-grants.html
-