Preserve the correctly scoped prepared provider credentials across fresh New Agent/setup configuration reads and execution-agent projection. Compare complete resolution provenance structurally, retain the logical configuration for ownership checks, and preserve candidate isolation and credential-rotation rejection.
Verified on the unchanged PR head: 49 focused local tests, a freshly built real-Gateway E2E with protected-store rotation, and a before/after regression comparison. Fresh structured autoreview completed without findings at its P0 threshold. Exact-head CI and native guarded prepare checks passed.
Related: #141191. Separate unconfirmed custom-provider/profile interactions are not claimed fixed.
Worked on by:
- @IWhatsskill
Co-authored-by: IWhatsskill <284122573+IWhatsskill@users.noreply.github.com>
