Vite Environment Variables as a Trust Boundary: Keeping Secrets Out of the Client Bundle
Vite inlines import.meta.env values into the client bundle at build time, so the VITE_ prefix is your entire trust boundary. An architecture note on requirements, the minimal design, checks, and failure modes.