Security

Security documentation starts with practical handling rules for credentials, logs, and deployment changes.

Secret handling

environment variable or secret manager -> application runtime -> redacted logs

Production credentials belong only in approved deployment-local configuration or a secret manager.