Azure Key Vault Secrets That Reconcile Themselves in Go, With mamori

Azure Key Vault is the well-behaved citizen of the Azure secrets world. Every secret is versioned; you get soft-delete and purge protection; access is governed by RBAC or access policies; and DefaultAzureCredential means your app authenticates the same way locally ( az login ) and in production (Managed Identity/Workload Identity on AKS) with zero code changes. And yet the same old gap is there.