{
 "record_id": "WTA-R-JP-0005-015",
 "kind": "obligation",
 "record": {
  "record_id": "WTA-R-JP-0005-015",
  "provision": "Section 4-5(6)",
  "applies_to": [
   "Developers",
   "Public bodies"
  ],
  "duty": "Keep credentials, API keys and encryption keys out of source code and repositories, run automatic leak detection, and revoke or rotate any secret found leaked.",
  "type": "Security testing",
  "status": "applies now",
  "applies_from": "2026-10-20",
  "url": "https://wheresthe.ai/id/WTA-R-JP-0005-015/",
  "rule": {
   "record_id": "WTA-R-JP-0005",
   "id": "jp-gennai-standard-government-ai-agents-2026",
   "title": "Government AI Gennai governance, security and safety standard (Gennai Standard), 1st edition",
   "jurisdiction": "JP",
   "jurisdiction_name": "Japan",
   "url": "https://wheresthe.ai/rule/jp-gennai-standard-government-ai-agents-2026/"
  },
  "penalty": "No penalty in the Standard.",
  "scope_note": "Read in the official Japanese text (Digital Agency, Gennai Standard 1st edition, October 2026). Duty of Gennai developers.",
  "date_note": null,
  "source_url": "https://www.digital.go.jp/assets/contents/node/basic_page/field_ref_resources/b033337d-dad1-4493-9316-d929597e4667/9bbaf559/20261020_policies_genai_guideline_02.pdf",
  "verified_on": "2026-10-25",
  "citation": "WTA-R-JP-0005-015: Section 4-5(6), Government AI Gennai governance, security and safety standard (Gennai Standard), 1st edition. wheresthe.ai, https://wheresthe.ai/id/WTA-R-JP-0005-015/ (checked 2026-10-25)."
 },
 "history": [
  {
   "date": "2026-10-25",
   "id": "WTA-R-JP-0005-015",
   "change": "added",
   "kind": "obligation",
   "label": "Keep credentials, API keys and encryption keys out of source code and repositories, run automatic leak detection, and revoke or rotate any secret found leaked."
  }
 ],
 "note": "Informational, not legal advice. Every record links to its official source; check it before relying on a record. Cite as \"Source: wheresthe.ai\"."
}