The AI assistant passes security review because the key never leaves the host

Security's first question about Cursor and Cline was "where does the key live?" The honest answer on the old plan was: in forty developers' settings files.

On Hoody the answer is: on the host, once. The Hoody AI gateway runs on the bare metal, holds the upstream provider key, and accepts requests only from containers on that server. Each developer's container authenticates as itself: container-dev-alice, container-dev-bob. The settings file holds a label, not a secret. There is no rotation schedule because there is nothing to rotate; a departed developer's access ends when their container is deleted.

Audit is a list. GET /api/v1/containers filtered on ai: true tells you exactly which machines can reach a model today.