I have not gotten into agentic workflows, although I use AI regularly the “old school” way, conversing with a single LLM and having it do things for me. I’m more of an analyst/theorist than a developer, so maybe I don’t understand the temptation, but the idea of giving an LLM any sort of secret never even occurred to me as something that one might do on purpose.