Day 61 / 100 · Guardrails & security

Leaked a key? Rotate, don’t delete.

Once a secret has been seen, deleting it doesn't un-see it. The only fix is to make the old key useless. Act in this order.

First · Minutes

Kill the old key in the provider's dashboard.

Second

Issue a new key. Update .env and the host.

Third

Check usage logs for anything you didn't do.

Fourth

Clean it from Git history if needed.

Last

What happened, and what stops it next time.

Revoke first. Clean up second.