provider/

Package broker is the trusted host-mediated HTTP boundary for provider agents.

Package cassette records and replays broker responses deterministically.

Package credentials mints and resolves opaque credential handles as attenuated capabilities.

Package responsepolicy filters untrusted vendor responses into safe, schema-declared bytes.

Package sink defines the managed writable secret sink contract.