un YOLO is a framework for building credential brokers and proxies for services such as GitHub, Hugging Face, or Google Workspace. It ensures that AI agents never hold real credentials, preventing accidental account-wide damage from mistaken commands.

The system keeps fine-grained policies in a local scope.json file, removing the need for separate agent accounts or complex permission screens. When an agent requires additional permissions, operators can provide timed grants that expire automatically.

Every request follows a strict path: client authentication, request classification, policy evaluation, and provider execution. The decision order is fixed—deny wins over everything. The broker records all decisions in a secret-safe audit log, while operators can manage approvals via a protected inbox or Telegram.