- Shipped
- November 6, 2026 at 8:09 PM UTC
- Author
- Kamo
- Commit
- f3d7d48
The SI names an item; the Tool Plane reads the focused window and the browser's address bar from the machine itself, asks VaultService (which checks the site binding and writes its activity row first), types the value into the SI's own workstation and tells the model only that it did. The value is never in arguments, plans, approval cards, results, memory or logs, and every workstation answer afterwards is scrubbed of it (keyed hashes in Redis, never the value). Shell secrets go in an environment variable. vault is never on behalf.