Security and governance

Scoped execution and read-only investigation with short-lived credentials, policy gates, reviewer approval, and audit evidence on every run.