Secret handling Available
Secrets are file-mounted, owner-only, encrypted at rest for stored connection secrets, and never read back.
Evidence: docs/SECRETS.md; tests/test_secret_hygiene.py
Administrators
Provisioning, secrets and platform administration.
SSO / SCIM Planned
Planned: enterprise identity federation.
Evidence: IGB-DOC-06 §6