Tool Gate · How it works
How the Keys and Secrets Sorting Drill gate works
How the Keys and Secrets Sorting Drill rolls ten keys into one verdict: an irreversibility gate means a key that was reachable once and never rotated stays ROTATE NOW wherever it lives today - the sample reads KEYS BURNED.
How the gate works
This tool grades each key on where it lives now and whether it has ever been somewhere it shouldn't. It reads 10 keys and rolls them into one verdict — the worst, never the average — and then a gate that can only make it worse.
The 10 keys
| Key | Verdict |
|---|---|
| K-01 · Database service key | SAFE WHERE IT ISsecret · server env · never public |
| K-02 · Email sending API key | ROTATE NOWwas public once, never rotated since |
| K-03 · Payment processor secret key | SAFE WHERE IT ISwas public once — but rotated since |
| K-04 · Database public API key | MEANT TO BE PUBLICpublishable by design |
| K-05 · Analytics write token | ROTATE NOWsecret, shipped in the client bundle |
| K-06 · Deployment token in .env.example | MOVE ITprivate repo · not reachable, but wrong home |
| K-07 · Payment processor publishable key | MEANT TO BE PUBLICpublishable by design |
| K-08 · Old admin token from the first buildfix first | ROTATE NOWlocation not found |
| K-09 · Map tile key | SAFE WHERE IT ISclass not found → still lands safe |
| K-10 · AI provider key pasted for help | ROTATE NOWsecret, pasted into a shared chat |
The verdict bands
Reachable once and not rotated since is ROTATE NOW, no matter where the key lives today. Tidying cannot undo exposure — moving a burned key to a safe home leaves it burned. An unfound answer is scored as the worst answer that blank could have hidden, so looking less hard never improves the result.
In the worked sample it reads KEYS BURNED — Four of ten keys need rotating, and only two of those are reachable right now. The other two are the point of the drill: one was public once and was never rotated, and one has a home nobody could find. K-03 was public once too — but it was rotated, so it lands safe. Two publishable keys are public by design and never count against you. The one thing to fix first: K-08, the old admin token from the first build — where it lives could not be found, so it resolves to the worst place it could be.
Common questions
Can every key look survivable on the How the Keys & Secrets Sorting Drill gate works and the company still read KEYS BURNED?
Yes. The roll-up takes the worst of 10 keys — never the average — then a worsen-only gate, the Irreversibility gate, escalates when trouble clusters. In the worked sample it reads KEYS BURNED because four of ten keys need rotating, and only two of those are reachable right now. The other two are the point of the drill: one was public once and was never rotated, and one has a home nobody could find. K-03 was public once too — but it was rotated, so it lands safe. Two publishable keys are public by design and never count against you.
What is a worsen-only gate?
A dispositive rule that can only lower a verdict, never raise it. One fatal flaw overrides an otherwise-set of survivable lines, because a single disqualifying gap shouldn't hide behind an average of the healthy ones. The tool also names the one thing to fix first — here, "K-08, the old admin token from the first build — where it lives could not be found, so it resolves to the worst place it could be".
Grades where credentials live, never a person. It never asks for a key value and connects to nothing — it reads back what you tell it, using rules you can see.
Embed this diagram
Free to share and embed with attribution (CC BY 4.0) — keep the link to redhub.ai.
Interactive — renders the live diagram
<iframe src="https://redhub.ai/visuals/tool/keys-secrets-sorting-drill.html" title="How the Keys and Secrets Sorting Drill gate works — RedHub AI" width="760" height="2189" loading="lazy" style="border:0;width:100%;max-width:760px"></iframe>
<p style="font:14px/1.5 system-ui,sans-serif"><a href="https://redhub.ai/visuals/tool/keys-secrets-sorting-drill">How the Keys and Secrets Sorting Drill gate works</a> — by <a href="https://redhub.ai">RedHub AI</a>, the AI that tells you when to doubt it.</p>Image + link — a static picture for any blog
<a href="https://redhub.ai/visuals/tool/keys-secrets-sorting-drill"><img src="https://redhub.ai/visuals/tool/keys-secrets-sorting-drill-share.png" alt="Diagram of the Keys and Secrets Sorting Drill: ten keys, an irreversibility gate, and a sample reading KEYS BURNED." width="760" loading="lazy" style="max-width:100%;height:auto;border-radius:16px"></a>
<p style="font:14px/1.5 system-ui,sans-serif"><a href="https://redhub.ai">RedHub AI</a> — the AI that tells you when to doubt it.</p>
This is how Keys and Secrets Sorting Drill works. More diagrams in the Visual Field Guide.