🔢 PIN
A PIN of 3 to 12 digits.
Type id: type-pin. Agents and sneakers-put name the type by this id; sneakers_list_secret_types lists it.
🧾 Fields
| Field | Key | Kind | Required | Secret | Notes |
|---|---|---|---|---|---|
| Description | description | Multi-line text | No | No | |
| PIN | pin | Secret value (never generated) | Yes | Super-sensitive | must match ^\d{3,12}$; at most 12 characters |
| Notes | notes | Multi-line text | No | No |
🔒 What's secret
PIN is masked until someone who can read the secret reveals or copies it, and every reveal and copy is written to the audit trail. Everything else is plain metadata that anyone who can see the folder can see.
PIN is super-sensitive: the reveal shows a partial mask first and takes a second, deliberate reveal for the whole value. Service accounts and personal tokens can't read it while the Allow API access to sensitive secrets setting is off, which is the default (security settings).
🔁 Heartbeat, rotation and check-out
- Heartbeat: no.
- Rotation: no.
- Check-out: no.
🎯 Targets
A PIN takes no target.