Connections
Workspace gener8v · posting to #delivery · synced 2 min ago
Project G8V · 62 work items mirrored
Webhook delivery failing since 13:40Z · 4 events queued
Bucket g8v-evidence-va · eu-west-2 · SSE-KMS
Credential rejected · rotated key not yet applied
Read replica · 12 tables in scope
Not connected
Credentials
The masked value is not in the DOM. A CSS mask over the real string leaves the secret in the markup, in devtools and in any DOM snapshot — so the mask is a substitute string and the real value only mounts once revealed. Copy never requires reveal: making someone display a key in order to copy it is how keys end up in screenshots. Write-once secrets drop the reveal control entirely.
API keys
- CI pipelineg8v_…4f2aread:evidencewrite:findingsused 3 min ago
- Audit exporterg8v_…91c7read:auditexpires in 6 days
- Legacy importerg8v_…0d13read:*write:*expired 2 Aug
Event rules
Inbound endpoint
A write scope is tinted; read scopes are not. In a list of twelve scopes the one that can change something is the only one worth a second look. An expiring key is a warning rather than an error, because it still works today — expired is the error.