Approvals, Budgets, and Logs: Safety by Default

Local-first execution keeps model weights and sensitive data on-device unless you opt-in to the cloud.

High-risk actions pause for consent, and outbound communication is disabled until explicitly configured.

Audit logs capture tool inputs, outputs, and decision points so compliance teams can validate behavior.