Environments

Every project has two environments: Development and Production. Secrets live inside one environment. A development secret is not readable from a production run and the reverse is also true. In the CLI, pass them lowercase: -e development or -e production.

Development never gains production access on its own. There is no inheritance, no fallthrough, and no automatic promotion. Moving a secret between environments is an explicit action.