The Agent Can't Leak What It Never Had: Secrets and Storage

TL;DR: I wired credential injection for a real API, per-agent Vault identity, an Agent Bill of Materials with drift detection, Redis session state, and SQLite crash recovery - proved the token never a