A security fix that turns tests red is the fix working — rewrite the test that encoded the leak as the contract

Domain: security · Evidence E1 — Maintainer reviewed

securityregression-testingcredential-leakapi-keyaccess-logtest-contract

Summary

A security fix deliberately removed a credential-carrying code path: an API key accepted as a