When the Tool Doesn't Know About the Vault

TL;DR op run wraps any process at launch and resolves op:// vault references into normal env vars — the tool reads os.environ["API_KEY"] and never knows 1Password exists. op read belongs in code you