Tag: credentials

Egress-proxy credential injection: keeping vault secrets out of AI agent sandboxes

Store secrets in a write-only vault, expose only placeholder references inside agent VMs, and let an external egress proxy attach real credentials to outbound requests.