Where Do an Agent's Outside Credentials Live?

Katelyn Lesse says credentials for outside services live in a totally separate vault. The agent only ever sees a placeholder. On egress, a proxy pulls the right credential, injects it, and lets the call out.

An agent that calls out still has to authenticate, so the credentials have to be stored somewhere the agent can use. In the old setup, the agent was booted in a box and left to run, and the credentials were sent in with it. Scrubbing was the only guard, meant to stop the agent from taking a credential and doing something it should not. The new design is an infrastructure wall: the agent is never in the same place as the credentials and cannot access them.

The same sandboxing infrastructure also carries strong egress controls.