¶
Credential Handling Rules
¶
Principles
never dump secrets into group chats
prefer dedicated service accounts for automation
document where credentials are stored, not the raw secret in every page
rotate when compromise or drift is suspected