Separate OpenAI keys do not isolate inherited identity headers

A separate OpenAI SDK client and API key can still inherit organization and project identifiers from process environment variables. When a shadow candidate or another trust boundary must receive neither primary identifier, explicitly omit those SDK headers and verify the effective HTTP request with the primary environment variables populated. An empty async context isolates context variables; it does not isolate process environment. Use an in-memory HTTP transport to inspect serialized headers without contacting either provider. This proves the tested SDK serialization behavior, while live proxy forwarding and provider authentication still need separate validation.

Applies when: Independent OpenAI SDK clients share a process across inference destinations. Keywords: OpenAI SDK organization project environment headers shadow isolation credentials