A workspace identity and Kubernetes credential boundary forming the foundation for persistent AI engineering environments.