config.ts

1// Web3Forms access key for the in-app feedback form (Settings → feedback).2//3// SECURITY NOTE (audit INFO): this key ships in the public extension bundle by4// design — Web3Forms "access keys" are client-side, write-only form-submission5// identifiers, not secrets. The feedback POST carries only the category + the6// user-typed message (sanitized) + a static from_name; NO vault data, keys, or7// credentials are ever included, and the key cannot read prior submissions or8// access anything. The only abuse it enables is spamming Peach's own feedback9// inbox. It is therefore safe to ship, unlike a cryptographic key. If inbox10// spam becomes a problem, proxy feedback through a rate-limited backend11// (tracked as "Vesper") and rotate this token.12export const WEB3FORMS_KEY = 'af0b7072-e3fa-4cb3-99b5-4ad3b87fac66';