May be the coding agents should build a layer when they don't leak any IP, treat them like environment variables, which must be handled deterministically.