secrets.appneural.com
SECRETS
Every API key, passcode and token of every project: encrypted, versioned, audited and synced to Cloudflare Workers.
Catalog surfaceDEPLOYEDHEALTHY
InventoryACTIVE54 items
P2PARTIALLY VERIFIEDPUBLISHED
Purpose and boundaries
Each project has its own environments and its own AES-256 data key, wrapped by a master key held only as a Worker secret. Values can be references to a secret in another project, every change keeps a version that can be revealed or restored, and Compare shows drift between environments without decrypting. Scoped service tokens read one environment over /api/v1 for CI and .dev.vars, and sync targets push changed keys to Cloudflare Workers. Every unlock, reveal, export, token read and sync is audited. The public inventory exposes only random project IDs. Per domain: secret.<domain> holds one domain's secrets only (78 of 79 domains; timeslotx.com is not connected yet).
A governed store of credentials (API keys, passcodes, tokens) per project and environment: encrypted at rest, versioned, audited and delivered to runtimes and CI.
Non-sensitive runtime configuration stays in each Worker's vars; user identity and sign-in stay in Auth.
- Priority
- P2
- Portfolio
- Identity & Security
- Capability
- Identity & Security
- Technical owner
- Not configured
- Runtime
- Cloudflare Workers / OpenNext
- Last verified
- 2026-11-08T06:19:29.984Z
Every number says what it counts
Governance evidence required
6 of 18 required controls are configured. Catalog deployment and inventory maturity remain independent until every required control is present.
MissingBusiness owner
MissingProduct owner
MissingTechnical owner
MissingMaintaining team
ConfiguredGitHub repository
ConfiguredProduction URL
ConfiguredHealth endpoint
MissingDocumentation
MissingArchitecture document
MissingCurrent security review
ConfiguredData classification
MissingDependencies
MissingConsumers
MissingSLA / SLO
MissingOn-call
MissingLast release
ConfiguredLast verification
ConfiguredDeprecation status
secret schema v1
Catalog-specific metadata is not configured.
Where it runs
secrets.appneural.com
- Worker
- secrets-catalog
- Health
- HEALTHY
- Last deployment
- 2026-11-03T00:00:00.000Z
Confirmed infrastructure only
Provider inspection appears after Cloudflare credentials are configured. Mutations require dry run, idempotency and explicit confirmation.
Technical context
Documentation
Documentation and architecture evidence are not configured.
Registered relationships
No dependency edges are registered. Nothing has been inferred.
Checks and verification
Review posture
Security review not configured. This does not mean the catalog is secure or insecure.
GitHub · Cloudflare · DNS · catalog APIs
Drift findings
Trust record
DNS resolvesScheduled registry and network check · cloudflare-worker
VERIFIEDNo remediation required.
Canonical hostname matchesScheduled registry and network check · cloudflare-worker
VERIFIEDNo remediation required.
HTTPS worksScheduled registry and network check · cloudflare-worker
VERIFIEDNo remediation required.
Production environment existsScheduled registry and network check · cloudflare-worker
VERIFIEDNo remediation required.
Repository existsScheduled registry and network check · cloudflare-worker
VERIFIEDNo remediation required.
Business owner existsScheduled registry and network check · cloudflare-worker
UNVERIFIEDConfigure or repair: Business owner exists.
Product owner existsScheduled registry and network check · cloudflare-worker
UNVERIFIEDConfigure or repair: Product owner exists.
Technical owner existsScheduled registry and network check · cloudflare-worker
UNVERIFIEDConfigure or repair: Technical owner exists.
Maintaining team existsScheduled registry and network check · cloudflare-worker
UNVERIFIEDConfigure or repair: Maintaining team exists.
Documentation existsScheduled registry and network check · cloudflare-worker
UNVERIFIEDConfigure or repair: Documentation exists.
Architecture documentation existsScheduled registry and network check · cloudflare-worker
UNVERIFIEDConfigure or repair: Architecture documentation exists.
Security review is currentScheduled registry and network check · cloudflare-worker
UNVERIFIEDConfigure or repair: Security review is current.
Data classification existsScheduled registry and network check · cloudflare-worker
VERIFIEDNo remediation required.
Dependencies existScheduled registry and network check · cloudflare-worker
UNVERIFIEDConfigure or repair: Dependencies exist.
Consumers existScheduled registry and network check · cloudflare-worker
UNVERIFIEDConfigure or repair: Consumers exist.
Health endpoint existsScheduled registry and network check · cloudflare-worker
VERIFIEDNo remediation required.
SLA or SLO existsScheduled registry and network check · cloudflare-worker
UNVERIFIEDConfigure or repair: SLA or SLO exists.
On-call existsScheduled registry and network check · cloudflare-worker
UNVERIFIEDConfigure or repair: On-call exists.
Release existsScheduled registry and network check · cloudflare-worker
UNVERIFIEDConfigure or repair: Release exists.
Catalog inventory synchronizesScheduled registry and network check · cloudflare-worker
VERIFIEDNo remediation required.
Infrastructure drift is clearScheduled registry and network check · cloudflare-worker
UNVERIFIEDConfigure or repair: Infrastructure drift is clear.
DNS resolvesScheduled registry and network check · cloudflare-worker
VERIFIEDNo remediation required.
Canonical hostname matchesScheduled registry and network check · cloudflare-worker
VERIFIEDNo remediation required.
HTTPS worksScheduled registry and network check · cloudflare-worker
VERIFIEDNo remediation required.
Production environment existsScheduled registry and network check · cloudflare-worker
VERIFIEDNo remediation required.
Repository existsScheduled registry and network check · cloudflare-worker
VERIFIEDNo remediation required.
Business owner existsScheduled registry and network check · cloudflare-worker
UNVERIFIEDConfigure or repair: Business owner exists.
Product owner existsScheduled registry and network check · cloudflare-worker
UNVERIFIEDConfigure or repair: Product owner exists.
Technical owner existsScheduled registry and network check · cloudflare-worker
UNVERIFIEDConfigure or repair: Technical owner exists.
Maintaining team existsScheduled registry and network check · cloudflare-worker
UNVERIFIEDConfigure or repair: Maintaining team exists.
Human-reviewed drafts
AI outputs are saved as drafts with evidence references. They never replace verified catalog fields automatically.