Trust & safety

Credentials stay local

Packages may declare which credentials they need, but raw values do not belong in Hub, Agent Cloud, public docs, memory, or sync records.

Store values in the OS keychain, an approved local vault, or a gitignored project credential file.
Cloud save scans full bytes and structured credential patterns before upload.
Restore never materializes a credential value from the package.
Borrowed agents receive only the host-granted credential boundary for the current run.