fix(security): wire Guardian secret_key (raise in prod) #1

Merged
jules merged 1 commits from fix/audit-security-blockers into main 2026-06-21 01:15:22 +00:00

1 Commits

Author SHA1 Message Date
20ce45717a fix(security): wire Guardian secret_key (raise in prod)
ArcadiaCloud.Guardian had no secret_key for prod at all — every authed route
would fail at deploy. Wire it from GUARDIAN_SECRET_KEY, raising when absent in
prod; keep the pinned dev/staging default.

Ecosystem audit 2026-06-20, rank 2 blocker.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-20 16:22:17 +10:00