Before the session

Read Days 31, 35 and 38 (about five minutes each), or Module 4 on the cheat sheet.

The 30 minutes

  1. 0–5 minOpen

    Quick round: name one error message that stopped you this month.

  2. 5–15 minDiscuss three days
  3. 15–25 minExercise: Map one tool

    Pick one tool the team is building. Draw it as the restaurant: what users see, what runs on the server, where the data is kept and where each secret lives. Circle anything in the wrong place.

  4. 25–30 minAction for the week

    Each person checks one project for keys or passwords in the code, moves them to a .env file, and confirms .env is in .gitignore.

    Agree the team rule: “Code is shared. Secrets are not.”

Watch for

Thinking a deleted secret is gone (Day 36). If a key was ever pushed, it's in the history: revoke it and issue a new one.

You’ll need

A whiteboard or shared doc for the drawing, and a timer.

Next session: Module 5 · First projects. Bring the map from today's exercise and anything the secrets check turned up.