Status: IN
FTL2 implements defense-in-depth for credentials: bindings auto-inject secrets without source code exposure, repr/str always redact values, secrets are never logged, and resolution happens at call time so variables never appear in scripts.