PACT Security Patterns

Security guidance for PACT development phases. This skill provides essential security patterns and links to detailed references for comprehensive implementation.

SACROSANCT Rules (Non-Negotiable)

These rules are ABSOLUTE and must NEVER be violated.

Rule 1: Credential Protection

NEVER ALLOW in version control:

• Actual API keys, tokens, passwords, or secrets
• Credentials in frontend code (VITE_, REACT_APP_, NEXT_PUBLIC_ prefixes)
• Real credential values in documentation or code examples
• Hardcoded secrets in any file committed to git

ONLY acceptable locations for actual credentials: