secrets-policy git:20261016.7bc6b88A

Immutable. This exact content never changes and is served at /api/v1/blob/623e058e259a257e.

---
name: secrets-policy
description: "States the secrets policy for contributors. Use when asked how credentials are handled."
---

# Secrets policy

NEVER commit credentials, tokens or private keys; read them from `ACME_*` environment variables.

Secrets MUST NOT have a default value; fail fast when one is missing.