Exercise 2: Why the "Good" Versions Still Give a Legitimate Reader Everything They Need — Possible Solution
====================================================================

WHAT THE "GOOD" VERSIONS ACTUALLY TELL THE READER
------------------------------
Per this chapter's table, the safe version reads "Retrieve the
production API key from the secrets vault, field 'prod-api-key'" and
"Confirm you have escalated access via the access-request process
before continuing." Neither version omits information the reader
needs to actually complete the step - each one tells the reader
exactly where to go and what to do to obtain the value themselves.

WHY THIS IS DIFFERENT FROM SIMPLY DELETING THE STEP
------------------------------
A version that just said "obtain the API key somehow" or left the
authentication step out entirely would genuinely be less useful - the
reader would be stuck without knowing where to look. The "good"
versions instead redirect the reader to the exact location the value
actually lives (a named secrets-vault field, a named access-request
process), which is functionally equivalent guidance to stating the
value directly, just one indirection away.

WHY A LEGITIMATE READER LOSES NOTHING FROM THAT INDIRECTION
------------------------------
A legitimate reader, by definition, already has (or can obtain) access
to the secrets vault or the access-request process referenced - the
indirection costs them one extra lookup step, not a missing piece of
information. They still end up with the actual key or the actual
access they need to complete the runbook; the runbook just doesn't
carry that sensitive value itself.

WHY AN ILLEGITIMATE READER LOSES SOMETHING REAL, WHILE A LEGITIMATE
ONE DOESN'T
------------------------------
Someone without legitimate access to the secrets vault or the access-
request process gains nothing from the reference alone - they'd need
to separately compromise that system to get the actual value, exactly
the barrier the "bad" version (the value written directly into the
runbook) removes entirely. The reference preserves the real value's
own protection while still telling a legitimate reader precisely how
to reach it.

WHY THIS WORKS AS AN ANSWER
------------------------------
It explains what specific guidance the "good" versions do provide,
distinguishes this from simply omitting the step, and explains why a
legitimate reader (who already has or can get the referenced access)
loses nothing meaningful while an illegitimate reader gains nothing
from the reference alone.