A Free Host Is Still a Foreign Room

Description and use

Free inference hosts risk exposing secrets and logs across the network. A preflight deny manifest scans the repo and env vars to block sensitive data before a remote session.

Problem

Free inference hosts expose secrets, logs, and customer identifiers to external networks, creating trust boundary violations.

Outcome

The script identifies disallowed files (.env, .pem, etc.) and sensitive env vars, preventing accidental exposure to a free host.

Workflow

• Create a temporary demo repo with source and .env file
• Run room_manifest.py with --root and --env-file to classify paths
• Run room_manifest.py with --include-process-env to scan environment variables
• Review any deny or review findings
• If script exits nonzero, abort remote session
• If green, proceed with remote coding agent

Evidence

Free access lowers the price of a trial, but it does not move that room inside your trust boundary.

Source

A coding agent is the courier who walks between those rooms while carrying a large open bag.

Source

Run a deny manifest before the session.

Source