The Escrow Layer — Or, "It's in the Repository" Is Not the Same as "It Can Be Rebuilt"
Today a hosting provider forced a password reset across its customer base (111 points). Somewhere in that crowd is a team that did everything right: credentials documented, secrets in a vault, an escrow copy of the source in a second location.