# HBSE Setup

HBSE is Vegvisir's secret boundary. Store provider and service credentials in HBSE and use service/provider refs from Vegvisir. Artifacts and logs should record ref metadata only, never secret values.

See `/hbse services`, `/hbse provider <id>`, and setup next steps.
