Integration boundary

Provider-specific operations belong inside the corresponding integration module. This reduces unnecessary coupling between external credentials and unrelated application functions.

API permissions

• Use provider accounts intended for API access.
• Grant only the operations required by the integration.
• Use provider IP whitelisting where appropriate.
• Test credentials before production assignment.

Failure handling

Integration failures should be treated separately from core application health. A provider API outage should not be assumed to mean the JKPanel application itself has failed.

Module distribution

Modules should be distributed without hard-coded production credentials, provider tokens or private test-environment secrets.