Post

Platform breaches that touch environment variables turn one vendor incident into every customer's incident. Contracts should require breach notice windows and rotation support, and teams need tested secret-rotation runbooks, since recovery time is set by the slowest dependent service.