SAMPLE EVIDENCE for SK-01 (made-up app Tidyhaus; not a real review)

Browser-exposed variables in .env.example: VITE_SUPABASE_URL, VITE_SUPABASE_ANON_KEY, VITE_STRIPE_PUBLISHABLE_KEY, VITE_MAPS_KEY.
Decoded Supabase key payload: {"role":"anon"} (signature redacted).