Keymaster.checkout

Signature

checkout(params: CheckoutParams)
  : Promise<CheckoutOutcome>

packages/keymaster/src/keymaster.ts ↗

Rules

• Agents never hold real secrets (S1).
• A lease expires or is revoked.

Where it appears

• Carry an agent’s outbound callGatekeeper
• Check out a credential for one callKeymaster