The OAuth-to-Secrets Failure Mode: How Identity Drift Leaks Config and Secrets
When OAuth permissions drift, tokens outlive intent and secrets spill through CI/CD and app config. Operators must tighten least privilege, token lifecycles, and rotation playbooks.