TENANT ISOLATION
Postgres Row Level Security scopes workspace-owned records to authenticated membership.
SECURITY MODEL
CONTROL IS A
PRODUCT CAPABILITY.
The Console is designed around constrained authority, tenant isolation, verifiable state transitions and honest failure handling.
TOKEN ENCRYPTION
OAuth grants are encrypted server-side with authenticated AES-256-GCM and context binding.
CURATED CONNECTORS
Open the task to review its progress and result.
OBSERVABLE RUNS
Open the task to review its progress and result.
APPROVAL GATES
Consequential work pauses with exact impact and a one-time human decision.
FAIL-CLOSED CONFIG
Missing secrets and unavailable integrations produce explicit errors, never simulated success.
Threat model priorities
The system assumes connected data can be adversarial. Tool output is treated as untrusted data, authorization headers are redacted from evidence, outbound endpoints are allowlisted and private network destinations are rejected.
Boundaries
Open the task to review its progress and result.
Responsible disclosure
Open the task to review its progress and result.