Security

Last updated: June 2026

Security is the architecture, not an add-on.

Isolation

One organization, one stack — separate compute, identity, and data. Cross-tenant access denial is tested, not assumed.

Governance

Agents run under capability policies independent of the human driving them; risky actions are approval-gated; every action is audited with a request ID. Software installs are checked against allowed registries and publishers.

Identity & access

SSO-backed identity, role-based access, and short-lived, revocable delegation for top-down operator access. Reach our team for the full security overview.