Commit

This happened so many times that I changed config to explicitly forbid AI from reading .env and instead use 1Password to store secrets. I create a .env.tpl file which is readable by AI and only has non-secrets and {{ op://... }} references in it. I have a script that resolves the references from 1Password into the .env file using op CLI. Haven't had a problem with accidental reads since.