https://shipreadyai.dev/learn/verify/secret-rotation

> Discover all available pages from the documentation index at https://shipreadyai.dev/llms.txt

# Key rotation

Whether you can replace a leaked key quickly and know everywhere it is used.

## Why a check from outside cannot see it

Keys are stored in a console, not in the page. A check can see a key that leaked into a bundle, and nothing at all about the ones that were stored correctly.

## How to check it yourself

1. List every key the app uses and write down where each one is stored.
2. Rotate one of them in the provider console.
3. Deploy, then see what broke. What broke is the list of places that key was quietly copied to.

## What a Launch Review does instead

A reviewer lists every key the app uses and where it lives, then walks the rotation path for one of them.