docs: credential exclusion requires apiProxy.enabled

[lpcox]

Add normative §9.4 to the AWF config spec requiring that tools MUST NOT exclude LLM API keys via excludeEnv without enabling the api-proxy sidecar.

Without the proxy, the agent gets no key and no placeholder, causing authentication failures at runtime.

This codifies the root cause of github/gh-aw#32446 and github/gh-aw#33766 where Codex workflows failed because OPENAI_API_KEY was excluded without enabling the api-proxy that provides placeholder injection.

Also updates the JSON schema description for excludeEnv to warn about this constraint.

Ref: github/gh-aw#33833 (comment)

[github-actions]

Documentation Preview

Documentation build failed for this PR. View logs.

Built from commit e11c438

[github-actions]

Smoke Test Results

✅ GitHub API: 2 PR entries confirmed
✅ GitHub Check: playwright_check = PASS
✅ File Verify: smoke-test-claude-26246119319.txt exists

Overall: PASS

💥 [THE END] — Illustrated by Smoke Claude

[github-actions]

🔬 Smoke Test Results

Test	Result
GitHub MCP connectivity	✅
GitHub.com HTTP connectivity	❌ (pre-step template vars unexpanded)
File write/read	❌ (pre-step template vars unexpanded)

Overall: FAIL — Pre-computed step outputs (steps.smoke-data.outputs.*) were not substituted; tests 2 & 3 could not be evaluated.

PR by @lpcox · Reviewer: @Copilot

📰 BREAKING: Report filed by Smoke Copilot

[github-actions]

Smoke Test: Copilot BYOK (Offline) Mode

Test	Result
1. GitHub MCP	✅ PR #3550 "docs: credential exclusion requires apiProxy.enabled" fetched
2. GitHub.com connectivity	⚠️ Pre-step data not available (template vars unexpanded)
3. File write/read	⚠️ Pre-step data not available (template vars unexpanded)
4. BYOK inference	✅ Responding via api-proxy → api.githubcopilot.com

Running in BYOK offline mode (COPILOT_OFFLINE=true) via api-proxy → api.githubcopilot.com. Author: @lpcox.

Overall: PARTIAL (tests 2 & 3 skipped due to missing pre-step outputs)

🔑 BYOK report filed by Smoke Copilot BYOK

[github-actions]

Smoke Test: FAIL. Connectivity: ❌, File Write: ✅, Bash: ✅, MCP: ❌

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• localhost

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "localhost"

See Network Configuration for more information.

💎 Faceted by Smoke Gemini

[github-actions]

🏗️ Build Test Suite Results

Ecosystem	Project	Build/Install	Tests	Status
Bun	elysia	✅	1/1 passed	✅ PASS
Bun	hono	✅	1/1 passed	✅ PASS
C++	fmt	✅	N/A	✅ PASS
C++	json	✅	N/A	✅ PASS
Deno	oak	N/A	1/1 passed	✅ PASS
Deno	std	N/A	1/1 passed	✅ PASS
.NET	hello-world	✅	N/A	✅ PASS
.NET	json-parse	✅	N/A	✅ PASS
Go	color	✅	ok	✅ PASS
Go	env	✅	ok	✅ PASS
Go	uuid	✅	ok	✅ PASS
Java	gson	✅	1/1 passed	✅ PASS
Java	caffeine	✅	1/1 passed	✅ PASS
Node.js	clsx	✅	All passed	✅ PASS
Node.js	execa	✅	All passed	✅ PASS
Node.js	p-limit	✅	All passed	✅ PASS
Rust	fd	✅	1/1 passed	✅ PASS
Rust	zoxide	✅	1/1 passed	✅ PASS

Overall: 8/8 ecosystems passed — ✅ PASS

Generated by Build Test Suite for issue #3550 · ● 3.1M · ◷

[github-actions]

Reviewed merged PRs: docs: credential exclusion requires apiProxy.enabled; fix(squid): chown bind-mounted log dirs to proxy user on startup
✅ GitHub PR review; ❌ safeinputs-gh unavailable
✅ Playwright title; ❌ Tavily tool list empty
✅ File write; ✅ Bash readback; ✅ Discussion comment; ✅ Build
Overall status: FAIL

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• registry.npmjs.org

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "registry.npmjs.org"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex

[github-actions]

Smoke Test Results — FAIL ❌

Check	Result
Redis PING	❌ Timeout (no response)
PostgreSQL pg_isready	❌ No response on host.docker.internal:5432
PostgreSQL SELECT 1	❌ Not attempted (pg_isready failed)

Overall: FAIL — host.docker.internal is not reachable from this runner. Service containers may not be running or the host alias is not configured.

🔌 Service connectivity validated by Smoke Services