From b1533bc80cc8d2afbf6ff315efc5b25154adfebe Mon Sep 17 00:00:00 2001
From: joshavant <830519+joshavant@users.noreply.github.com>
Date: Sat, 21 Feb 2026 13:23:29 -0800
Subject: [PATCH] Gateway: avoid double secrets activation at startup

---
 src/gateway/server.impl.ts | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/src/gateway/server.impl.ts b/src/gateway/server.impl.ts
index b8d9969b56b..b5c1b121370 100644
--- a/src/gateway/server.impl.ts
+++ b/src/gateway/server.impl.ts
@@ -306,11 +306,10 @@ export async function startGatewayServer(
           : "Unknown validation issue.";
       throw new Error(`Invalid config at ${freshSnapshot.path}.\n${issues}`);
     }
-    const prepared = await activateRuntimeSecrets(freshSnapshot.config, {
+    await activateRuntimeSecrets(freshSnapshot.config, {
       reason: "startup",
-      activate: true,
+      activate: false,
     });
-    cfgAtStart = prepared.config;
   }
 
   cfgAtStart = loadConfig();