The CamelHive Standard

CH-FSEC-006

No server-side secret reaches the browser (public env prefixes, server-only modules imported from client code)

Currently v3.29.0. To cite a stable, pinned form of this page, use /standard/versions/3.29.0/CH-FSEC-006.

Area
FSEC
Severity
critical
Detection
llm
Corpus coverage
not measured by the corpus

Corpus coverage measured as of 9/2/2026 (commit 2c57d95600).