secrets

You Cannot Instruct an Agent Not to Leak

Memory notes told the agent not to echo secret values. It did anyway, twice. The fix was structural enforcement at the tool boundary, not better instructions.

Secrets Management for AI Agent Teams

How to manage secrets across projects, machines, and autonomous agents without .env files, hardcoded credentials, or accidental exposure.

Secrets Injection at Agent Launch Time

How a CLI launcher scans repos, matches them to projects, and injects the right secrets without .env files or hardcoded credentials.

Completing the pivot to Infisical - every Bitwarden reference removed

Vault sub-paths for secrets that should not be injected