Security & Governance

Authentication

When AUTH_ENABLED=true, agent chat and workflow state endpoints require authentication. The public demo (POST /agent/demo) remains unauthenticated for the product page.

Project isolation

Agent tools are scoped to the project directory under user_projects/{slug}/. Demo sessions use isolated _demo/{session_id}/ paths.

Tool policies

Each PDLC stage restricts which tools the agent can call (e.g. Discover limits to documentation tools, not arbitrary code execution on unrelated paths).

Secrets

Agents are instructed never to hardcode credentials. Use environment variables and the project secrets store for sensitive values.

Demo rate limiting

Public demo endpoints should be rate-limited in production deployments. Ephemeral demo projects are stored on disk and can be cleaned periodically.

Human in the loop

Stage advancement and file changes are visible in workspace chat (tool calls, file change events). Review agent output before deploying to production environments.