diff --git a/claude_bottle/backend/docker/backend.py b/claude_bottle/backend/docker/backend.py
index f6c2071..89668d5 100644
--- a/claude_bottle/backend/docker/backend.py
+++ b/claude_bottle/backend/docker/backend.py
@@ -19,7 +19,7 @@ from pathlib import Path
 from typing import Iterator, Sequence
 
 from ... import pipelock
-from ...env_resolve import env_resolve
+from ...env import resolve_env_into
 from ...log import die, info
 from ...manifest import SshEntry
 from ...util import expand_tilde
@@ -108,7 +108,7 @@ class DockerBottleBackend(BottleBackend):
         prompt_file.chmod(0o600)
 
         proxy_plan = self.prepare_proxy(spec, stage_dir)
-        env_resolve(manifest, spec.agent_name, env_file, args_file)
+        resolve_env_into(manifest, spec.agent_name, env_file, args_file)
         prompt_file.write_text(agent.prompt)
 
         allowlist_summary = pipelock.pipelock_allowlist_summary(bottle)
diff --git a/claude_bottle/env_resolve.py b/claude_bottle/env.py
similarity index 99%
rename from claude_bottle/env_resolve.py
rename to claude_bottle/env.py
index 0e0b3e7..0e70a3a 100644
--- a/claude_bottle/env_resolve.py
+++ b/claude_bottle/env.py
@@ -97,7 +97,7 @@ def _read_secret_silent(name: str, prompt_body: str) -> str:
     return value
 
 
-def env_resolve(
+def resolve_env_into(
     manifest: Manifest,
     agent: str,
     env_file: Path,