The vibe-coded app leaks its key and leaks nothing

You let an agent write the whole app: signup, billing, a chat feature. Somewhere in 4,000 generated lines it does what generated code does: logs the config object on startup, AI credential included, and ships the logs to a third-party dashboard.

On any platform where the app holds a real provider key, that line just published it. On Hoody the credential is container-app-prod. The gateway on your server authenticates by which container the request came from; the string itself carries nothing. The dashboard now holds a token that returns 401 from anywhere outside your box.

You still read the code before shipping. But the class of mistake that turns a sloppy console.log into someone else's spending spree is structurally gone.

Generated code can leak the key, because the key isn't one.