Zero-trust architecture

Every action sandboxed in gVisor containers. No persistent access. Defense-in-depth: dual-LLM guard, DID signing, prompt injection scanner, credential vault. All data encrypted TLS 1.3 in transit, AES-256 at rest. No data leaves without cryptographic proof.