SECRETS.md

Part of the AI Dev Workspace Primitives index.

Purpose

A manifest of the secrets this project needs — not the secret values themselves, but the metadata an agent or contributor needs to find and use them.

For each secret, record:

• Name — env var, config key, or referenced identifier as used in code.
• Where it lives — vault and item (e.g. 1Password vault Private, item OpenRouter API).
• How to retrieve it — the exact CLI invocation, e.g. op read "op://Private/OpenRouter API/credential", or the secret-reference URI.
• Scope / purpose — what it authenticates and what breaks without it.
• Rotation posture — manual / automated / never, and where rotation is performed.

Lets agents fetch what they need on demand without secret values ever entering the repo, the prompt, or the chat transcript.