we moved secrets out of the prompt and into a proxy and slept better

the model never sees the key. it calls our proxy, the proxy injects the secret and forwards the request. the agent cannot leak what it never had. worth the extra hop.