How to stop an AI agent from reading your secrets

Both Cursor and Claude Code document the same hole in their own guides: the ignore or deny rule that hides your .env from the agent does not stop the terminal it runs commands in.