displayName
Explicit injection only
rule
Secrets are injected into agent subprocess via env vars listed in LaunchContract.advertisedSecrets only; no implicit forwarding.
scope
agent-session
enforcement
launch-contract
rationale
Audit trail of which secrets each agent run had access to.