We let our cloud agents query prod (with OIDC, not secrets)

Formal uses OIDC to provide cloud coding agents with auditable, policy-controlled, short-lived access to production data and cloud infrastructure without relying on long-lived secrets.