Vault-backed secret storage, workspace isolation, the networkless sandbox for agent-authored code, approval-gated typed tool calls, and compliance evidence export.