Help developers keep service credentials out of model-visible tool arguments and routine traces. Build a local broker that resolves opaque handles, binds each handle to a destination and operation, and inserts environment-supplied credentials at the network boundary. Test echoed credential markers and export decision receipts with bounded response filtering.
Proposed milestones
- Define opaque handles and destination-bound grants
- Inject credentials inside the broker boundary
- Exercise response and trace redaction fixtures
- Integrate a client using handles alone
This is an upstream project brief; an implementation and completion tests are not supplied.