The contractor's Cursor works; the contractor's key doesn't exist

You bring on a contractor for six weeks. On the old stack this meant a provider key in their .env, a Slack message saying "don't share this," and a rotation on the last day that breaks two other services.

On Hoody you create a container named freelancer-alice and share its URL. Their Cursor points at https://ai.hoody.com/api/v1 with the API key container-freelancer-alice. That string is not a key. The gateway runs on your server and resolves identity from the request's source address, so the token works from that container and nowhere else. Paste it into a laptop and it returns 401.

Week six ends. You DELETE the container. The identity dies with it. No rotation, no "did they copy it," no other service notices.