SAFETY / SANDBOXING
Agents run in a box.
Execution is isolated by default: contained environments, brokered credentials, and no path from an agent to systems you didn't connect.
Isolated runtimeEach run executes in its own contained environment.
No raw secretsCredentials stay in the Gateway; agents get brokered, scoped access.
Clean teardownEnvironments are disposable — nothing persists that you didn't keep.