{"id":"secretmanager-pin-version-not-latest","text":"Best practice is to reference secrets by specific version number in production, not the `latest` alias, to enable validation and rollback.","truth_value":"IN","source":"entries/2026/03/11/secretmanager-best-practices.md","source_url":"","source_hash":"08524a165dc98d34","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"secretmanager-pin-version-not-latest","truth_value":"IN","reason":"premise"}]}}