leamout init creates the production filesystem layout used by the current CLI:
deployment.json contains the durable deployment identity and mode. leamout.env contains generated runtime configuration and secrets and is written with restrictive permissions.
Generated values include runtime service credentials, the carrier-credential encryption key, TURN authentication material, and private state/coordination credentials.
Do not manually rotate generated secret values by editing leamout.env unless a documented lifecycle command explicitly requires it. The CLI treats the generated environment and deployment identity as a matched configuration.