Skip to main content

Secret Recovery Runbook

Owner: adrper79-dot. Last updated 2026-05-08.

Purpose

Re-derive every secret from its upstream source if GitHub access is lost or org secrets are corrupted.

Inventory & re-derivation steps

After full rotation

  1. Run Bootstrap Publish All Packages workflow to verify NPM credentials.
  2. Trigger one Worker deploy per app to verify Cloudflare creds.
  3. Run Smoke — Prime Self Production to verify Stripe keys end-to-end.
  4. Verify Sentry receives a test event from each app.

Last drill

Never run. Schedule one for 2026-06-01.