# COPY outside Git, chmod 600. Literal KEY=value only, no shell expansion.
# Never reuse the old QA_DB_URL from another database.
# For start: qa.py takes the URL from a live qa_isolation.py lease when this key is absent.
# Do not use the legacy 14321 endpoint or a raw direct connection for application start.
# If explicitly supplied, FUSION_QA_DB_URL must match the owned loopback port/database exactly.
FUSION_QA_APP_PASSWORD='REPLACE_WITH_APPROVED_APP_PASSWORD'
TRAIN_STUDENT_IDENTITY_ENCRYPTION_KEY='REPLACE_WITH_APPROVED_QA_ENCRYPTION_KEY'
TRAIN_STUDENT_IDENTITY_HASH_KEY='REPLACE_WITH_APPROVED_QA_HASH_KEY'
# qa.py creates a separate 0600 runtime-secrets.env for this isolated instance.
# Admin login credentials are provisioned externally, not seeded or reset by these scripts.