Secrets

Confidential material includes API tokens, TLS private keys, database passwords, and signing seeds requiring vault storage. Rotation policies and sealed CI integrations limit exposure windows. Logs must redact secret values even during verbose debugging.