Same diligence we use at kickoff. One section at a time.

No passwords, API keys, or test accounts here. Those move on a private channel after we scope.