For agents, on top of README.md, which they read first.

• Forward never writes the real key into a fixture: only the headers in KEPT are recorded. A header added there must not be able to carry a credential.
• Replay answers a miss with a non-retryable 400, never a retryable status: a retrying client would turn one miss into several.