An AI Key Leaked. Would We Notice?
The quieter calls before a surge in stolen AI usage caught my attention. A look at the provider-side evidence I would want, and the limits of an agent trace.
notebook / tag
#credential-security
3 entries with this tag.
Two Secret Scanners Saw Different Leaks
A large Gitee scan returned surprisingly different findings from two tools. What I would check before treating a scanner's quiet report as evidence of coverage.
Your Evaluation Sandbox Holds Production Authority
An evaluation environment can be disposable while its credentials are not. A practical design for separating test workloads, provider keys, and production authority.