<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Compliant by Design</title><description>Fortnightly essays on building AI products under Australian regulation, written from inside the work.</description><link>https://ugoharry.com/</link><language>en-au</language><item><title>I Committed an API Key to a Public Repo. Here&apos;s the Whole Remediation, Not the Sanitised Version.</title><link>https://ugoharry.com/essays/api-key-incident/</link><guid isPermaLink="true">https://ugoharry.com/essays/api-key-incident/</guid><description>I found a live Anthropic API key committed in .env.example. The whole remediation, in order, and what changes when the product is regulated.</description><pubDate>Thu, 09 Jul 2026 00:00:00 GMT</pubDate></item></channel></rss>