Governance is part of the runtime.

Access, secrets, and audit are not a separate product. They apply to the console, the APIs, and the agent together.

Local accounts or your IdP. Services use revocable API tokens. Break-glass exists and is audited.

A role that cannot deploy in the UI cannot deploy from a script. Same authorizer, three surfaces.

Every resource is scoped. Cross-tenant access looks like a missing object, not a hint that it exists.

Transforms cannot see the host or the network unless you wire a connector and allow the call.

Credentials are referenced, not copied. Exported packages stay that way.

Encryption, retention, and a gate in front of hosted model providers when a prompt would leave the box.