🃏 Env Fallback Provider Resolution

Summary

Backward-compatible environment variable fallback for provider secrets. Used when no active vault credential exists. Labeled as legacy/bootstrap in status surfaces.

Action Types

• resolve
• fallback

Risk Model

{
  "classification": "medium",
  "notes": "Secrets live in process environment. Prefer vault for production."
}

Metadata

{
  "fallback_order": 2,
  "packet": "SECRETS-1B"
}