There's a B2B SaaS that a non-engineer executive built all the way to production in two days, by handing everything to an AI.
Real customers use it. It works. Features ship fast. It's genuinely impressive.
And then I got handed the infra and the ops for it. I'm the guy who walks the "it's running in production" code path one step at a time. Treasure hunt, minefield sweep — somewhere in between.
Today's story is about one of those steps: where the secrets (API keys and friends) were kept, and the game of hide-and-seek that played out there.
Here's the punchline up front: every time I said "uh, that's dangerous," the secret's hiding spot moved house. And every time it moved, I got the look that says "there, now it's safe, right?"
