Governance
Security & access
Enterprise SSO, role-based access, secrets hygiene, and stop/freeze on managed paths.
- Enterprise identity (SSO) and environment membership
- Least-privilege roles for who can invoke models, tools, and admin surfaces
- Secrets hygiene — names without values in day-to-day UI
- Stop and freeze authority on managed paths
Ceiling: controls apply on supported clients and paths — not a promise to intercept every closed vendor product on day one.
Related: Security and trust (Foundations) · Policy & human gates