Note

Medium Risk
Changes core session replay privacy behavior by introducing explicit mask/unmask precedence and propagation, which could affect what gets redacted in recordings. Risk is mitigated by added unit tests but still impacts sensitive-data handling paths.

Overview
Aligns Android session replay masking with a new explicit precedence model: explicit mask (including ldMask() and maskXMLViewIds) propagates to descendants and overrides everything, explicit unmask (ldUnmask()) propagates but cannot override an explicit mask, and global privacy rules (e.g. maskTextInputs, maskText, maskWebViews) only apply when no explicit signal exists.

Implements this by splitting PrivacyProfile matchers into explicitMaskMatchers vs globalMaskMatchers, extending MaskTarget with hasLDUnmask, updating MaskCollector traversal to carry inherited explicit state, and wiring ImageCaptureService to pass both matcher sets. Adds focused tests for the new precedence rules and updates docs/comments to match; the React Native adapter also switches Observability logging to LDObserveLogging.adapter().

^{Reviewed by Cursor Bugbot for commit d7e05f1. Bugbot is set up for automated code reviews on this repo. Configure here.}