Security center

Auditable controls, explicit trust boundaries.

Tenant-scoped backend authorization, roles, scoped tokens, visible agent evidence, secure transport expectations, and bounded failure behavior protect workspace operations.

Review all security controls Report a concern

Identity

Authenticated sessions, tenant membership, roles, and scoped application tokens control access.

Token boundary

Web retains origin-local storage. Store builds are memory-only unless a verified native secure-storage bridge is actually available.

Governance

Agent plans, approvals, evidence, audit events, and explicit completion conditions make sensitive workflows reviewable.

This page describes product controls; it does not claim an external security certification.