Rotate the Anthropic API key exposed in TUF Apps Script version history

What to do

Rotate the Anthropic API key exposed in TUF Apps Script version history.

Why

What to do: rotate the Anthropic API key at https://console.anthropic.com/settings/keys. No money figure is on file for it. It is 17 day(s) past its ClickUp due date.

If you approve

I carry it out with the usual safety checks and post the proof on the ClickUp task.

If you deny

Nothing is done. The task is closed with your reason and it will not come back in the brief.

Where it is tracked

the ClickUp task

How it ends

Ends when the ClickUp task is closed.

What to do: rotate the Anthropic API key at https://console.anthropic.com/settings/keys — revoke the old one, issue a replacement, and put the replacement wherever the TUF automation now reads it from. This is yours; I cannot do it. Why: an Anthropic API key (sk-ant-api03-...) was sitting in plain text inside the TUF client's Apps Script source. I removed it from the live source in the v129 roll-forward, so nothing reads it from there any more — but Apps Script keeps every prior version of a project forever, and the key is still readable in that version history. Anyone with edit access to that script project can open an older version and read it. Deleting the current line does not delete the old versions, and there is no way to scrub them. Treat the key as exposed from the moment it was committed, not from today. What it is worth: an unrotated key is someone else's spend on our account and our rate limit, with no cap and no alert until the bill arrives.