Annotation Interface Confidential
This annotation describes the intended security posture for descriptor validation and policy integration. It does not, by itself, enable TLS, encrypt a payload, select a transport, suppress logging, or make a method safe to expose remotely. Confidentiality remains enforced at the configured transport, authorization, codec, logging, status, and audit boundaries that explicitly consume the metadata.
Current annotation-first examples use @Confidential as
metadata-only documentation of the security family. They continue to rely on
the existing J7M rule that sensitive values are redacted from public output
and that production transports and policies are configured through the
normal runtime APIs.
API note: The annotation has runtime retention so explicit descriptor processors and validation tools can inspect the requested confidentiality posture. Absence or presence of this annotation must not be treated as a substitute for transport configuration or server-side authorization.