THE SECRET READ IS THE SECRET LEAKED
“The safest inspection is the one that never reads the value.”
A credentials file opened for a quick look lands in the transcript, the logs, and the telemetry, none of which carry a gitignore’s guarantees. On confirming that a key exists without ever learning what it says.