Everyone leaves with a plain picture of how apps, data and secrets fit together, and the team agrees where secrets live.
Read Days 31, 35 and 38 (about five minutes each), or Module 4 on the cheat sheet.
Quick round: name one error message that stopped you this month.
Pick one tool the team is building. Draw it as the restaurant: what users see, what runs on the server, where the data is kept and where each secret lives. Circle anything in the wrong place.
Each person checks one project for keys or passwords in the code, moves them to a .env file, and confirms .env is in .gitignore.
Agree the team rule: “Code is shared. Secrets are not.”
Thinking a deleted secret is gone (Day 36). If a key was ever pushed, it's in the history: revoke it and issue a new one.
A whiteboard or shared doc for the drawing, and a timer.
Next session: Module 5 · First projects. Bring the map from today's exercise and anything the secrets check turned up.