diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml
index 7da3eef..1860dc1 100644
--- a/.github/workflows/publish-release.yml
+++ b/.github/workflows/publish-release.yml
@@ -33,9 +33,9 @@ jobs:
     env:
       GH_TOKEN: ${{ github.token }}
       ADF_RELEASE_DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
-      ADF_RELEASE_SIGNING_PUBLIC_KEY_HEX: ${{ vars.ADF_RELEASE_SIGNING_PUBLIC_KEY_HEX }}
-      ADF_RELEASE_SOURCE_ID: ${{ vars.ADF_RELEASE_SOURCE_ID }}
-      ADF_RELEASE_SIGNER_KEY_ID: ${{ vars.ADF_RELEASE_SIGNER_KEY_ID }}
+      ADF_RELEASE_SIGNING_PUBLIC_KEY_HEX: ${{ vars.AGENTIC_RELEASE_SIGNING_PUBLIC_KEY_HEX }}
+      ADF_RELEASE_SOURCE_ID: ${{ vars.AGENTIC_RELEASE_SOURCE_ID }}
+      ADF_RELEASE_SIGNER_KEY_ID: ${{ vars.AGENTIC_RELEASE_SIGNER_KEY_ID }}
       ADF_RELEASE_TAG: ${{ inputs.release_tag }}
       ADF_RELEASE_REQUIRE_ATTESTATIONS: "1"
 
@@ -106,9 +106,9 @@ jobs:
     env:
       GH_TOKEN: ${{ github.token }}
       ADF_RELEASE_CANDIDATE_RUN_ID: ${{ inputs.candidate_run_id }}
-      ADF_RELEASE_SIGNING_PUBLIC_KEY_HEX: ${{ vars.ADF_RELEASE_SIGNING_PUBLIC_KEY_HEX }}
-      ADF_RELEASE_SOURCE_ID: ${{ vars.ADF_RELEASE_SOURCE_ID }}
-      ADF_RELEASE_SIGNER_KEY_ID: ${{ vars.ADF_RELEASE_SIGNER_KEY_ID }}
+      ADF_RELEASE_SIGNING_PUBLIC_KEY_HEX: ${{ vars.AGENTIC_RELEASE_SIGNING_PUBLIC_KEY_HEX }}
+      ADF_RELEASE_SOURCE_ID: ${{ vars.AGENTIC_RELEASE_SOURCE_ID }}
+      ADF_RELEASE_SIGNER_KEY_ID: ${{ vars.AGENTIC_RELEASE_SIGNER_KEY_ID }}
       ADF_RELEASE_DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
       ADF_RELEASE_REQUIRE_ATTESTATIONS: "1"
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1899c38..de7009c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -26,8 +26,8 @@ jobs:
       contents: read
       id-token: write
     env:
-      ADF_RELEASE_SIGNING_KEY_HEX: ${{ secrets.ADF_RELEASE_SIGNING_KEY_HEX }}
-      ADF_RELEASE_SIGNING_PUBLIC_KEY_HEX: ${{ vars.ADF_RELEASE_SIGNING_PUBLIC_KEY_HEX }}
+      ADF_RELEASE_SIGNING_KEY_HEX: ${{ secrets.AGENTIC_RELEASE_SIGNING_KEY_HEX }}
+      ADF_RELEASE_SIGNING_PUBLIC_KEY_HEX: ${{ vars.AGENTIC_RELEASE_SIGNING_PUBLIC_KEY_HEX }}
       ADF_RELEASE_SOURCE_ID: ${{ inputs.source_id }}
       ADF_RELEASE_SIGNER_KEY_ID: ${{ inputs.signer_key_id }}
       ADF_RELEASE_OUTPUT_DIR: ${{ github.workspace }}/dist/framework
diff --git a/docs/publishing.md b/docs/publishing.md
index 4b2dd7f..90f837f 100644
--- a/docs/publishing.md
+++ b/docs/publishing.md
@@ -41,14 +41,14 @@ step, or from a password manager, avoids that.
 
 | Where | Name | Value |
 |---|---|---|
-| Secret | `ADF_RELEASE_SIGNING_KEY_HEX` | the seed |
-| Variable | `ADF_RELEASE_SIGNING_PUBLIC_KEY_HEX` | the public key |
-| Variable | `ADF_RELEASE_SOURCE_ID` | the name releases are signed as coming from, for example `remote:official` |
-| Variable | `ADF_RELEASE_SIGNER_KEY_ID` | the key's identifier, for example `framework.release.2026-08` |
-
-Both names are recorded in the framework lock and the trust store and compared
-as exact strings, so changing either one later breaks projects that already
-pinned them. Choose them once.
+| Secret | `AGENTIC_RELEASE_SIGNING_KEY_HEX` | the seed |
+| Variable | `AGENTIC_RELEASE_SIGNING_PUBLIC_KEY_HEX` | the public key |
+| Variable | `AGENTIC_RELEASE_SOURCE_ID` | the name releases are signed as coming from, for example `remote:official` |
+| Variable | `AGENTIC_RELEASE_SIGNER_KEY_ID` | the key's identifier, for example `framework.release.2026-08` |
+
+The source ID and signer key ID are recorded in the framework lock and trust
+store and compared as exact strings. Changing either one later breaks projects
+that already pinned them, so choose them once.
 
 The key identifier should distinguish this key from the next one, because
 rotation means both exist in the trust store at the same time. A date or a