# oridecon-secrets > Secret vaults with rotation, tenant scoping, and audit. Machine index for **oridecon-secrets** only. Rules: https://docs.oridecon.dev/agents.md · Catalog: https://docs.oridecon.dev/llms.txt · Slices: https://docs.oridecon.dev/llms/index.txt · Skill: https://docs.oridecon.dev/SKILL.md ## Package - Name: `oridecon-secrets` - Group: Security — Auth, secrets, JWT, OAuth2, guards. - Docs: https://docs.oridecon.dev/packages/security/oridecon-secrets/ - Source (branch `dev`): https://github.com/dbtinoy-/oridecon/tree/dev/packages/oridecon-secrets - This slice: https://docs.oridecon.dev/llms/oridecon-secrets.txt - Install: `uv add oridecon-secrets` ## Boundaries - Extensions import only `oridecon` and `oridecon-contracts` — never each other. - Shared types live in `oridecon-contracts`. Do not invent a second copy here. - Constructor injection. `register()` binds, `boot()` resolves. - Domain failures are `Result[T, E]`. Infrastructure failures raise. - One tree: `domains/` (not `models/`), app-root `di/` for `*_provider.py`. ## Docs in this package - [Secrets (oridecon-secrets)](https://docs.oridecon.dev/packages/security/oridecon-secrets/): Secret vaults with rotation, tenant scoping, and audit for Oridecon Framework - [API Reference](https://docs.oridecon.dev/packages/security/oridecon-secrets/api/): Complete API reference for the oridecon-secrets package. ## See also - Playbook: https://docs.oridecon.dev/getting-started/for-coding-agents/ - Fail vs fix: https://docs.oridecon.dev/getting-started/common-mistakes/ - Group hub: https://docs.oridecon.dev/packages/security/ - Skill: https://docs.oridecon.dev/SKILL.md - Rules (do not skip): https://docs.oridecon.dev/agents.md