diff --git a/src/compute-plane-services/worker-llm-credentials/.bazelrc b/src/compute-plane-services/worker-llm-credentials/.bazelrc
new file mode 100644
index 000000000..5cba426b7
--- /dev/null
+++ b/src/compute-plane-services/worker-llm-credentials/.bazelrc
@@ -0,0 +1,51 @@
+# SPDX-FileCopyrightText: Copyright (c) NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# ============================================================================
+# Bazel configuration for nvcf-worker-llm-credentials.
+#
+# The release image is built from the isolated subtree snapshot, so the
+# release config (and pure-Go, workspace stamping) must live here rather than
+# only in the umbrella .bazelrc. See BAZEL.md for the shared wiring.
+# ============================================================================
+
+build --compilation_mode=fastbuild
+common --enable_bzlmod
+build --incompatible_strict_action_env
+common --enable_platform_specific_config
+
+test --test_output=errors
+test --test_env=HOME=/tmp
+test --test_env=XDG_CACHE_HOME=/tmp/.cache
+
+startup --host_jvm_args=-Xmx2g
+
+# ---- Go ----
+# Pure Go (no cgo) to match the distroless_go static base image.
+build --@rules_go//go/config:pure
+
+# ---- Workspace status (build stamping) ----
+# Feeds tools/workspace_status.sh keys (STABLE_VERSION, STABLE_OCI_TAG, ...)
+# into the stamped OCI tags emitted by the go_oci_image push target.
+build --workspace_status_command=tools/workspace_status.sh
+
+# ---- CI profile ----
+build:ci --jobs=16
+
+# ---- Debug / release profiles ----
+build:debug --compilation_mode=dbg
+build:debug -s
+build:release --compilation_mode=opt
+build:release --strip=always