Two environments, one server, zero shared secrets

A developer pastes a stack trace into a public issue. It includes the AI client config. On a shared-key setup that's the production key in a GitHub thread, and the next hour is rotation.

On Hoody, dev containers authenticate as container-dev-alice, production as container-api-prod. Neither string is a key and neither works off the server: but more to the point, they're different identities with independent ai flags. Want dev cut off for a day? PATCH {"ai": false} on the dev container. Prod doesn't notice.

The team stops maintaining the fiction of "the dev key" and "the prod key" as two secrets to guard in two places. They're two machines, and the gateway on the host tells them apart by address.