Began Framework start

CLAUDE.md

@@ -14,6 +14,22 @@ The PLC I/O Testing Platform is the first project built on this framework.
 - Jython 2.7 inside Ignition; Python 3.10+ for external tooling
 - Claude Code on the Linux host (VS Code Remote to Docker host)
 
+
+## API Key / Secrets Policy
+
+**Source of truth**: `~/.config/ignition-dev/secrets.env` (chmod 600, never committed)
+**Template**: `.env.example` in repo root — update this when adding new secrets
+
+### Rules
+- All secrets via environment variables — no hardcoded values in any file
+- Docker Compose references host env vars: `VAR=${VAR}` pattern
+- Python scripts use `python-dotenv` + `os.environ["KEY"]` (loud failure on missing)
+- `.env` at project root is a symlink to secrets file — listed in .gitignore
+- CI secrets live in Gitea repository secrets settings
+
+### Required Variables
+See `.env.example` for full list.
+
 ## Language Rules
 
 ### Jython 2.7 (Inside Ignition)