Credentials

When an Agent sees a password, the exposed problem is runtime governance

This incident review reframes 'the Agent saw a password' as a runtime-governance failure: credentials had become an always-online, always-visible, always-callable default capability instead of a short-lived, task-scoped resource.