Constant ALIAS_PREFIX 

pub const ALIAS_PREFIX: &str = "@secret:";

Reserved prefix that flags an @secret:<path> alias. Per ADR-020 §5: chosen so it cannot be accidentally interpreted by a shell expansion or a templating engine.