01 · THE GUARANTEES
Six rules that never bend.
RUNS AS YOURuns-as-you identity on every tool call — row- and field-level permissions inherited, every time.
APPROVAL-GATED WRITESConfiguration can add approvals, never remove them — the approval-required set is union-only.
BUDGETS BEFORE THE CALLCredits and quotas are checked before the model call, with daily token and cost budgets — and bring-your-own-key if you’d rather meter it yourself.
KNOWS WHAT IT’S NOT FOROff-topic questions are declined; admin questions are redirected to the right surface.
MODEL GOVERNANCEPlatform models are read-only per tenant; tenant models are BYO-key, encrypted.
ONE AUDIT TRAILQuestions, answers, approvals and actions land in the same audit trail as everything else.