The CamelHive Standard · v3.29.0

CH-FSEC-006v3.29.0

No server-side secret reaches the browser (public env prefixes, server-only modules imported from client code)

Pinned as it read in catalog v3.29.0 — the current version of this rule may read differently, see CH-FSEC-006.

Area
FSEC
Severity
critical
Detection
llm
Corpus coverage
not measured by the corpus