diff --git a/python/src/beval/reporter.py b/python/src/beval/reporter.py
index f5ad811..9b57252 100644
--- a/python/src/beval/reporter.py
+++ b/python/src/beval/reporter.py
@@ -47,8 +47,9 @@
 }
 
 # Patterns identifying sensitive keys for scrubbing (§10.1).
+# Excludes keyword_recall and keyword_recall_stderr via negative lookbehind.
 _SENSITIVE_KEY_RE = re.compile(
-    r"(secret|password|token|key|credential|auth|api.?key)",
+    r"(?<!keyword_re)(secret|password|token|key|credential|auth|api.?key)",
     re.IGNORECASE,
 )
 _REDACTED = "***REDACTED***"