{
  "schema": "brmste-edge-cloudflare-secrets/v1",
  "status": "active",
  "headline": "ALL SECRETS ON CLOUDFLARE",
  "policy": "Agents never collect secrets in chat — MCP-first or operator CI only",
  "identity_binding": {
    "cloudflare_com": "brmste.com",
    "https": true,
    "http_redirect": true,
    "hsts": "max-age=63072000; includeSubDomains; preload",
    "qgi": "Quantum General Intelligence",
    "gsi": "Global Substrate Infrastructure™"
  },
  "worker": {
    "name": "brmste-com-coming-soon",
    "account_id": "7ea6547b1d6eb1cbd6d0ac5cf960ce2a",
    "health_token": "brmste-coming-soon-v5"
  },
  "secret_inventory": {
    "note": "Names only — values live in Cloudflare dashboard or GitHub Actions secrets",
    "worker_secrets": [
      "ETORO_API_KEY",
      "ETORO_USER_KEY",
      "ETORO_ENV"
    ],
    "ci_secrets": [
      "CF_API_TOKEN",
      "CF_ACCOUNT_ID",
      "ETORO_API_KEY",
      "ETORO_USER_KEY"
    ],
    "never_in_repo": [
      "API keys",
      "Bearer tokens",
      "OAuth secrets",
      "Wallet seeds",
      "Operator PCT PDF/DOCX originals"
    ]
  },
  "agent_routing": {
    "inventory": "Cloudflare-bindings MCP",
    "deploy": "Cloudflare-builds MCP",
    "docs": "Cloudflare-docs MCP",
    "observability": "Cloudflare-observability MCP",
    "connect": "Cursor → Settings → Tools & MCP → Connect"
  },
  "scripts": {
    "set_banking_secrets": "https://github.com/BRMSTE-SB/.github/blob/main/scripts/set-banking-worker-secrets.sh",
    "deploy": "https://github.com/BRMSTE-SB/.github/blob/main/DEPLOY-COMING-SOON.md"
  }
}