The Vault allows administrators to store sensitive environment variables (API keys, database credentials, tokens) that are injected into the IDE session without exposing them to developers.

• Secrets are encrypted at rest (AES-256).
• Developers cannot view secret values — they can only use them in code.
• Secrets are never written to the file system or logged.

Set up via Workspaces → Select Project → Settings → Vault.