ADR-0007: Secrets remain outside documentation

• Status: Accepted
• Date: 2026-06-09

Context and decision

Operational procedures need names and locations, but repository access is broader than secret access. Raw environments, keys, tokens, database credentials, ACME state, and unredacted exports remain in approved restricted systems.

Alternatives

Encrypted secrets in this repository or copied raw exports were rejected because recovery key ownership and accidental disclosure would widen risk.

Consequences

Pages document secret names, paths, permissions, owners, rotation, and safe checks. Full recovery also requires the approved password manager and restricted backups.

Validation evidence

Repository QA checks secret-like filenames and human review remains mandatory.