I Didn't Know Where My Keys Had Leaked, So I Started Building GuestSafe
After a compromised Mac and AI agents leaked secrets into session logs, I began building GuestSafe: a local, auditable alternative to .env.local.
#secrets-management
2 articles
2 articles
After a compromised Mac and AI agents leaked secrets into session logs, I began building GuestSafe: a local, auditable alternative to .env.local.
A field survey of local secret stores for AI agents on macOS—and the privilege boundary needed to keep an agent from erasing its own access trail.