diff --git a/src/acp/secret-file.test.ts b/src/acp/secret-file.test.ts
index bef3cf3ed02..306bdd88621 100644
--- a/src/acp/secret-file.test.ts
+++ b/src/acp/secret-file.test.ts
@@ -1,11 +1,7 @@
 import { describe, expect, it } from "vitest";
-import { MAX_SECRET_FILE_BYTES, readSecretFromFile } from "./secret-file.js";
+import { readSecretFromFile } from "./secret-file.js";
 
 describe("readSecretFromFile", () => {
-  it("keeps the shared secret-file limit", () => {
-    expect(MAX_SECRET_FILE_BYTES).toBe(16 * 1024);
-  });
-
   it("exposes the hardened secret reader", () => {
     expect(typeof readSecretFromFile).toBe("function");
   });
diff --git a/src/acp/secret-file.ts b/src/acp/secret-file.ts
index 902e0fc0627..81fcc200e64 100644
--- a/src/acp/secret-file.ts
+++ b/src/acp/secret-file.ts
@@ -1,6 +1,6 @@
 import { DEFAULT_SECRET_FILE_MAX_BYTES, readSecretFileSync } from "../infra/secret-file.js";
 
-export const MAX_SECRET_FILE_BYTES = DEFAULT_SECRET_FILE_MAX_BYTES;
+const MAX_SECRET_FILE_BYTES = DEFAULT_SECRET_FILE_MAX_BYTES;
 
 export function readSecretFromFile(filePath: string, label: string): string {
   return readSecretFileSync(filePath, label, {