TOKENS.

38 service-to-service tokens audited across the platform. 12 unused in the last 60 days. 3 over-scoped beyond any documented requirement.

A token nobody can name is a credential waiting to leak.

AT-022 · ci-deploy-token-old UNUSED 90D

Last used 2025-08-04. Scope: write:all. Owner: unknown.

Revoke this week, audit deploy paths, replace with short-lived.