Description
Live control-plane and observability credential values were exposed in an agent transcript during an authorized delivery run. A human must rotate the affected credentials and verify that the replaced values can no longer authenticate. No credential values or environment-specific identifiers belong in this task.
Acceptance Criteria
- #1 The human identifies and rotates every credential value exposed in the transcript
- #2 The replaced credential values are independently confirmed unable to authenticate
- #3 All authorized live consumers are updated to use replacement credentials without committing secret material
- #4 The rotation and verification outcome is recorded here without real identifiers or credential values
Definition of Done
- #1 go build ./… && go vet ./… && go test -race ./…
- #2 golangci-lint run
- #3 scripts/regen-generated.sh (only if a generated artifact’s inputs changed)