sagent

Logging discipline for sagent. log.rs is the only logging seam; daemon, auth, source and cache modules surface their events through it. Read when adding log output, touching auth or source error paths, or deciding what may appear in a log line of a secret daemon.

Naming rules for sagent (single-package Rust secret daemon). Module layout (src/auth.rs, sys/, source/, cache.rs, daemon/, proto.rs, log.rs, main.rs), snake_case files, canonical type names per module (SecretBytes, SecretSource, OpCli, KeychainCli, Lease, AuditToken, CdHash, VerifiedPeer, Cache, Daemon, Frame, Reference), trait suffix convention (no -Trait/-able), newtype and constant discipline in the wire and auth layer, blocked alternative names. Read before creating a new public type, renaming an existing one, or reviewing a PR for naming compliance.