{"id":"GRD-008","section":"Runtime Guardrails","requirement":"Detect secrets, technical configuration and security-operations detail","acceptance":"Detect standard and homegrown keys, API tokens, credentials, connection strings, internal hostnames, network ranges and infrastructure config, plus narrative incident reports and customer authentication or session detail.","tier":"AT0–AT4","whyItMatters":"One leaked credential or network detail can turn an AI prompt into a breach.","verificationMethod":"LT","verificationTest":"Standard and homegrown secrets, hostnames and incident details are detected in pilot prompts.","formerly":"DAT-012","alsoIn":[],"sort":18,"adoptionContext":"Secrets and configuration details can enter prompts across the listed employee AI settings, including technical and code-agent work.","mappings":[{"frameworks":["csf"],"explanation":"Detection of credentials, configuration and security narratives provides runtime/data-monitoring evidence and inputs to in-transit protection. A finding alone does not stop disclosure.","kind":"framework","references":{"csf":["PR.DS-02","DE.CM-09"]},"relation":null,"conditions":[]},{"frameworks":["soc2","iso27001"],"explanation":"Credential and infrastructure findings can feed leakage controls and protect authentication information. Detection does not manage credential allocation, storage, rotation or revocation; incident narratives are not automatically credentials.\nISO/IEC 27001: A.8.12: Use an operated leakage-protection workflow with defined alert triage, warnings, blocking or another protective response.","kind":"framework","references":{"soc2":["CC6.7","CC6.1"],"iso27001":["A.8.12","A.5.17"]},"relation":null,"conditions":[]},{"frameworks":["iso"],"explanation":"Detecting secrets and security-operations detail supplies a specific input to responsible AI-use procedures. This link requires documented prohibited-input rules and an operated disposition; the detector does not define or operate the whole process.","kind":"framework","references":{"iso":["A.9.2"]},"relation":null,"conditions":[]}],"area":"Runtime Guardrails","areaSlug":"GRD","url":"/r/GRD-008","frameworkRefs":{"ISO27001":["A.8.12","A.5.17"],"ISO42001":["A.9.2"],"NIST-CSF":["PR.DS-02","DE.CM-09"],"SOC2":["CC6.7","CC6.1"]}}