A secret is rotated, but a running application continues using the old value. What should be checked?

1. Publish the new secret in error messages.
2. Version references, caching, refresh behavior, and the consumer rollout process.
3. Disable database authentication.
4. Assume rotation instantly rewrites every process's memory.