github-issues/T-017A.md

# ISSUE T-017A: Shared Environment and Secret Contract

**Status:** `status:complete`
**Parent:** #139 (GENESIS)
**GitHub ID:** 173

## Summary
Owns the shared configuration contract across local and remote environments.

## Completed
- [x] Unified `.env` and `.env.example` template.
- [x] Canonical config management in `ML_Pipeline/shared/env.py`.
- [x] Startup validation logic for missing/invalid keys.
- [x] `HF_TOKEN` defined as the primary secret.
- [x] Required keys implemented: `HSA_OVERRIDE_GFX_VERSION`, `PYTORCH_HIP_ALLOC_CONF`, etc.

## New Sub-tasks / Refinements
- [ ] Implement `gh variable set` sync script into the Workbench UI.
- [ ] Add automatic `.env` generation from GitHub variables via `gh variable list --export`.
- [ ] Securely handle `HF_TOKEN` masking in Workbench logs.