S-09Credential Leakage

Secrets that legitimately entered context escape through logs, outputs, traces and error messages.

Key insight

Enumerate the sinks, not just the sources: every place model-touched text lands is a place a key can land. Redact at the boundary and make keys short-lived so misses expire.

Failure mode

Long-lived keys plus verbose logging: one debug trace shipped to a vendor is a permanent credential.

S-09Credential Leakage

Elsewhere in the atlas