AIKIDO-2026-10853

TL;DR

The SDK writes LLM provider credentials and OpenRouter identifiers into the process-wide environment during LLM initialization. In a multi-tenant agent server, one conversation's credentials can become visible to other conversations in the same process and the most recently initialized LLM can overwrite earlier values. This can expose secrets or cause requests to use another tenant's credentials. The fix removes the environment writes and passes credentials through per-request keyword arguments and headers.