Security
- Brokered execute only; private plane not public
- CONNECT held
- Contributor packages: validate → scan → sandbox → test → auto-approve or auto-reject/quarantine (machine-readable reasons). No routine human approve queue
- Continuous monitor + auto-suspend; version re-runs the pipeline
- Fail closed on unsupported / arbitrary code
- Submitter code never deploys to prod execute plane
- Port
:8743never opened publicly
Owner exceptional controls
Policies, prohibited categories, emergency shutdown, exceptional account action — not day-to-day publication.