KB / Memory / tech-oma-credentials-out-of-sandbox
Credentials never enter the sandbox
Managed-agent platforms should inject secrets via outbound proxy, not into the sandbox FS
Invariant for managed agent runtimes: tool sandboxes must not see raw credentials; an outbound proxy injects them.
Project: project-open-managed-agents. Git host alias: tech-gh-token-git-host-alias. Related: feedback-public-kb-only.