- Strict secrecy: no mention of OpenClaw/Marcus/Lab in BMS contexts - Only main agent (Marcus) may hold BMS credentials and interact with API - Every action requires express permission from Daniel - Audit logging requirements and reversibility
