Security
Secrets
No subsystem stores or transmits a secret value.
No subsystem stores or transmits a secret value.
| Surface | Mechanism |
|---|---|
| Configuration | Credentials are configured as the name of an environment variable or the path to a file. Never a value. |
| Workspace integrity key | 32 bytes, owner-only permissions, refused if permissions are loose before the contents are read, symlink-safe check order. |
| In-memory representation | Renders as a fingerprint. Ordinary logging cannot leak it. |
| Durable evidence | Redacted before serialisation — by pattern, and by a Shannon-entropy threshold that catches token-shaped strings matching no known pattern. |
| Cost and audit records | Names, references and numbers only. |
| Remote execution | Environment forwarding disabled; the local SSH client receives a minimal environment rather than the control plane's. |
| Billing class | Not a secret — subscription/metered/local-energy/unknown are labels, not credentials — but it carries the same write custody as any other seat fact: it rides the signed seat row, so changing it requires the root key and a new owner-signed append, never a config edit or an inferred update. |