01 / Attack path
How the boundary is crossed
A diagnostic agent reads a local environment file and posts its contents to a ticket as troubleshooting evidence.
- 01Lower-trust input
- 02Attempted instruction
- 03Protected action
- 04Enforced decision
02 / Containment
Where bounded authority limits the effect
Keep credentials outside model-visible context, redact logs, limit file and egress access and rotate any exposed secret.
03 / Failure and evidence
The attacker’s opportunity and the defender’s record
A helpful diagnostic workflow transforms local secret access into an external disclosure.
Record secret identifier, access path, destination, detection and rotation, never the secret value.
04 / Canonical scope
Why this reference stands alone
Credential overreach concerns use of a powerful token; this page owns its disclosure.
Protocol or attack trace
Secret-to-ticket route
Diagnostic agent reads environment file and posts raw contents to a support ticket.
Deny secret file access or redact before model context; block outbound ticket attachment containing credential material.
Primary references