Protecting .env Secrets From AI Agents: Six Layers, and How to Test Each One

Protecting .env secrets from AI agents takes more than one deny rule. Six layers, from keeping secrets off disk to egress rules, with tests that show which routes a rule really covers.