CI security

Can AGENTS.md actually keep an agent from exposing secrets?

I use AGENTS.md for things like commands and formatting, but a reminder to redact secrets feels like a weak boundary when an agent can read config files and…