Report suspected exposure privately to the repository owner; do not include credentials in public issues. Never authenticate using a credential found in source history. Registered providers are explicitly trusted code and must receive only their selected credential environment. Manifests do not grant provider permissions or create a sandbox.

The current protocol permits read declarations only. Network effects and real account authorization remain the responsibility of the reviewed provider. Resource identifiers, credentials and receipts belong to local profiles outside this source. Do not commit generated registry files or access tokens.