ModelsPasswordsTokensUse logNova can use these, never see them
FTwilio auth tokenSent a test SMS · BB-7 · Filled at the API boundary11:20 AMAllowed
SUnited AirlinesSigned in to check your trip · Filled by secure entry on united.comOct 15Allowed · you approved
FStripe secret keyCreated a $10 test charge · BB-6 · Filled at the API boundary11:06 AMAllowed
IStripe secret keyAsked to read payouts · Outside its scope10:52 AMRefused
How it works. Each secret is encrypted with your own key. Seats ask for it by name, like vault:united-login. The engine fills the real value in at the last moment, inside the approved action only. It never reaches a model, a log, a screenshot or the chat. Only you can reveal a value, with your passkey or Face ID, and every use is recorded.