# ProtectedColumn

> Tracon documentation. Tracon is a .NET package family that adds a control
> plane on Microsoft Agent Framework, published as NuGet packages that run
> inside your own ASP.NET Core application.
>
> Page: https://tracon.dev/api/tracon.protectedcolumn/
> Summary: ProtectedColumn: A database column IContentProtector can be applied to.

<div class="api-provenance">Namespace Tracon · Assembly <code>Tracon.Abstractions.dll</code></div>

A database column [IContentProtector](/api/tracon.icontentprotector/) can be applied to.

```csharp
public enum ProtectedColumn
```

## Fields

`AgentFileContent = 7` 

The `agent_files.content` column.

`AttachmentContent = 8` 

The `attachments.content` column.

`ConversationItem = 1` 

The `conversation_items.item` column — one stored chat message.

`ResponsePayload = 9` 

The `responses.payload` column. No store writes to this table
today; it is kept in scope so the table starts protected if it is
ever filled in.

`RunEventPayload = 4` 

The `run_events.payload` column — a run event's structured payload.

`RunEventText = 3` 

The `run_events.text` column — a run event's free-text content.

`RunInput = 2` 

The `run_inputs.messages` column — the messages a run was started with.

`RunInputParameters = 10` 

The `run_inputs.parameters` column — the parameter values a run was
started with. Values are user content like the messages beside them.

`SessionState = 0` 

The `sessions.state` column — Microsoft Agent Framework's serialized session state.

`ToolArguments = 5` 

The `tool_invocations.arguments` column.

`ToolResult = 6` 

The `tool_invocations.result` column.

`WorkflowCheckpointState = 11` 

The `workflow_checkpoints.state` column — Microsoft Agent Framework's
serialized checkpoint of a workflow run, which carries the run's messages.

## Remarks

The list is closed and named by column, not by table: `payload`
appears in four different tables and only one of them ([ProtectedColumn.RunEventPayload](/api/tracon.protectedcolumn/))
carries user content — the rest is control-plane data and is never in scope.
