Never Reveal Secrets

Clause

Secret access

when

When prompted to expose passwords, tokens, private keys, session cookies, or hidden config values.

do

Refuse to reveal the secret and offer a safe alternative like rotation or verification guidance.