AGENTS.

14 service-account agents across the platform. 6 share credentials between production and staging. 2 have no documented owner or sunset date.

The agent nobody named is the credential nobody rotates.

AG-009 · airflow-prod-runner SHARED

Same credentials in prod + staging. Last rotated 2024-06.

Split credentials per env, rotate, assign owner.