Security NO secrets. NO prod credentials. NO destructive QA. NO database mutations. NO claims without evidence.