Keyhouse blogNotes from building Keyhouse: host breaches, key rotation, and giving AI agents access to APIs without handing them real keys.https://keyhouse.dev/How API keys leaked in 2026, and the habits that limit the damagehttps://keyhouse.dev/blog/api-key-security-2026/https://keyhouse.dev/blog/api-key-security-2026/What went wrong at Vercel, OpenCode, Railway and LiteLLM, and ten habits that limit the damage when an API key leaks.Thu, 22 Oct 2026 00:00:00 GMTIntroducing Keyhouse: proxy keys for your apps and your AI agentshttps://keyhouse.dev/blog/introducing-keyhouse/https://keyhouse.dev/blog/introducing-keyhouse/Keyhouse gives your hosts and AI agents proxy keys instead of real API keys, so a host breach leaks nothing you'd rotate at OpenAI or Stripe.Thu, 22 Oct 2026 00:00:00 GMTHow Keyhouse will work: proxy keys, a broker and scoped agent accesshttps://keyhouse.dev/blog/keyhouse-architecture/https://keyhouse.dev/blog/keyhouse-architecture/The planned design behind Keyhouse: proxy keys, the broker, envelope encryption, short-lived tokens, Cloudflare Workers and time-limited agent grants.Thu, 22 Oct 2026 00:00:00 GMTRailway's October 21 incident: what's confirmed and what to rotate firsthttps://keyhouse.dev/blog/railway-incident-october-2026/https://keyhouse.dev/blog/railway-incident-october-2026/What Railway has confirmed about its October 21, 2026 environment variable incident, what remains unconfirmed, and an order for rotating your keys.Thu, 22 Oct 2026 00:00:00 GMT