GreatScott/enject

How do you secure API secrets in local development without exposing them to devs?

20 votes, 25 comments. Hey everyone! I’m a tech-lead managing a development team, and we’re currently using .env files shared among developers to…

Michael Livs on Twitter / X

introducing pi-psst 🤫, your agent uses secrets without ever seeing them. no more scrubbing for @badlogicgames!secrets are injected as env vars to bash tool, scrubbed from all tool output, stored in local encrypted vault. the agent knows what's available but never sees a value.… pic.twitter.com/LB4RA5p4wF— Michael Livs (@micLivs) April 6, 2026

osvauld/osvauld

Fully open-source, end-to-end encrypted, peer-to-peer application suite.

Titan in depth: Security in plaintext | Google Cloud Blog

While there are no absolutes in computer security, we design, build and operate Google Cloud Platform (GCP) with the goal to protect customers' code and data. We harden our architecture at multiple layers, with components that include Google-designed hardware, a Google-controlled firmware stack, Google-curated OS images, a Google-hardened hypervisor, as well as data center physical security and services.

jedisct1/hf-mount-encrypted

Mount Hugging Face Buckets and repos as local filesystems, with client-side encryption.

Architecture

Overview of Ente's end-to-end encrypted architecture—learn how your data is encrypted on-device, securely shared, and safely stored using cryptography.

Sooraj on Twitter / X

IronClaw (@near_ai, Rust) is the most architecturally serious alternative. Built by @ilblackdragon as a direct response to OpenClaw's security failures. Tools and channels run in isolated WASM containers with capability-based permissions. Credentials live in an encrypted vault… https://t.co/3VkLn4f0Ai— Sooraj (@iAnonymous3000) February 16, 2026

Intent to Prototype: Isolated Web Apps

https://github.com/reillyeon/isolated-web-apps/blob/main/README.md

Privy Blog | Privy and Stripe: Bringing crypto to everyone

We started Privy a little over three years ago to make it easy for any developer to build better products on crypto rails. Whether crypto is core to your app or simply a new layer of functionality, a good crypto product should just feel like a good product, period. By making crypto usable, we help make it useful for everyone.

Machine Learning

Learn how Ente uses on-device machine learning to power private, end-to-end encrypted features like face recognition and semantic search—without a cloud.

Encrypted Spaces — Research preview

An architecture for collaborative applications where data is encrypted and operations are cryptographically verifiable.

OpenCode

Use OpenCode CLI without leaving your vault.

Ente Locker

Store your important documents and credentials. Share them with trusted contacts or pass them on in emergencies.

Composio

Just-in-time tool calls, secure delegated auth, sandboxed environments, and parallel execution across 1,000+ apps.

Secrets Don’t Belong in Config

An audit of 445 NixOS modules shows the cost of making configuration and secrets share one interface.