diff --git a/.kiro/steering/workspace-context.md b/.kiro/steering/workspace-context.md
index 65989b0..366883d 100644
--- a/.kiro/steering/workspace-context.md
+++ b/.kiro/steering/workspace-context.md
@@ -106,3 +106,6 @@ All filenames must be OneDrive-safe:
 - No single quotes or backticks
 - Replace umlauts in filenames: ä→ae, ö→oe, ü→ue, ß→ss
 - Use hyphens instead of special characters
+
+## Agent Restrictions
+- ONLY the human user is allowed to use `sudo`. Agents MUST NOT attempt to use `sudo` or request `sudo` access.
diff --git a/bahn/Confluence_Bot/.secrets.example b/bahn/Confluence_Bot/.secrets.example
index 65e41a8..8eba76b 100644
Binary files a/bahn/Confluence_Bot/.secrets.example and b/bahn/Confluence_Bot/.secrets.example differ