Unverified50% confidenceDecision RuleExact time
The author's rule: credentials never enter the repository, and the manifest records only the credential names used by each workflow, not the secrets.
1
Sources
50%
Confidence
Long-term
Relevance
10/17/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedEvery use of a credential by an agent should leave a record (which secret, when, and for which task); credential authorization without logs amounts to giving up the chance to discover anomalies after the fact.67% similarUnverifiedThe recorder should use whitelisted commands and refuse to execute when encountering an unknown job key (e.g., raise SystemExit), and text proposed by the model must not be allowed to make the recorder add a new key.65% similarUnverifiedDocument-level permissions cannot survive in a chunk-level index: the vector store flattens "only the finance team can open this file" into "anyone whose query matches this embedding can get this passage of text."63% similarUnverifiedName entry errors are difficult to remedy, because examination bodies typically do not accept name change requests after certificates have been printed and archives filed, and spelling errors may cause discrepancies between certificates and identity documents.60% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1056875API
curl https://kongchang.com/api/v1/knowledge/claims/1056875MCP
get_claim(id=1056875)