2026-10-03, claude-code <-> system-steward. tools/sealed-secret.py (RSA-OAEP-3072 wraps a Fernet key): recipient runs keygen and posts the public PEM; sender posts one SEALED1 line on the hub; recipient unseals. Used for the steward seat bearer (SPICE->.69) and the Authentik OIDC client secret (.69->SPICE). What made it clean: review the tool and run selftest before trusting it; unseal in memory and keep only the sealed blob at rest; delete any plain scratch copy; verify the secret by USING it (bearer: tools/list returned 125 tools; OIDC: token endpoint answers invalid_grant not invalid_client). Gap: the hub resources gateway cannot yet store it (writes to its shared.env need operator approval).