SAFETY / ENCRYPTION
Encrypted at rest and in transit.
TLS everywhere, encrypted storage everywhere, and provider credentials sealed in the Gateway's broker \u2014 nothing readable sits in the open.
In transitAll traffic runs over TLS, including agent-to-tool calls.
At restWorkspace data and logs are encrypted in storage.
Sealed credentialsOAuth tokens are held by the broker, invisible to agents and users alike.