Encryption

Encryption should happen before the package leaves the process boundary. That keeps the transport path responsible for delivery, not for confidentiality.

errorcore.init({
  service: "billing-api",
  encryptionKey: process.env.ERRORCORE_KEY,
});

Use stable key delivery from secret management and rotate keys as an operational change, not a code-level experiment.