AI-assisted commits leak secrets at 2X the baseline rate. A working credential architecture for agents: references, runtime resolution, scoped vaults, wrapper.