In general:

a) You cannot prune attributes that are used in schema.keys or used in mitigator rules (in the rule itself or in the incident details).

b) You cannot prune attributes if other required attributes depend on it.

c) Default attributes like guid-out, next-guid, prev-guid-out and user attributes used in login page definitions (like: user-from-login) can be prune