Expand description
Secret references. A credential is named, never held: the model carries
WHERE a value lives (docs/ORCHESTRATOR-IR.md §1 rule 3), and a vault
resolves it at the moment of use.
Enums§
- Secret
Ref - Where a secret value lives. Wire form:
{"env": NAME}or{"dotenv": KEY}.
Traits§
- Vault
- Resolves references at use; never part of a serialized model.