A recap of BSides San Antonio 2026 covering how secrets can escape detection even after source, pull request, and CI/CD scans pass, over-permissioned Azure managed identities escalating access, and connecting runtime evidence to compliance requirements.