📄 中文摘要
自主代理舰队面临的凭证问题不仅仅是安全存储秘密，更在于架构能否在整个凭证生命周期内（包括轮换、过期、范围设置和撤销）无须人工干预地运作。由于代理通常在无人的情况下运行，若某个代理因 API 密钥被轮换而无法继续工作，整个舰队将陷入停滞，直到有人注意到问题。人类开发者与 API 的交互通常是基于会话的，进行一次身份验证后便可完成工作并退出，而代理则需要一种能够自动处理凭证变更的机制，以确保其持续运行。有效的秘密管理架构应当能够适应这一需求，确保代理在面对凭证变更时依然能够正常运作。
自主代理舰队中的 API 凭证：秘密管理架构指南
📄 English Summary
API Credentials in Autonomous Agent Fleets: A Secrets Management Architecture Guide
The credentials problem in autonomous agent fleets goes beyond secure secret storage; it involves whether the architecture can operate throughout the entire credential lifecycle—rotation, expiry, scoping, and revocation—without human intervention. When an agent fails due to an API key being rotated, the entire fleet can become stuck, unable to proceed until a human notices the issue. Unlike human developers who interact with APIs in sessions, agents require a mechanism that can automatically handle credential changes to ensure continuous operation. An effective secrets management architecture must adapt to this need, ensuring that agents can function normally in the face of credential changes.