Applied AI·The API layer
the key lives in an environment variable and a secrets manager, never in the repo, because one leaked key and a quiet weekend is a five-figure invoice.
API key hygiene
Draft summary, pending review
Keys live in environment variables or a secrets manager, never in client code or repos; scope them per environment, rotate them, and set spend alerts. One leaked key plus one weekend equals a very unpleasant invoice.