Identity & access
OIDC/SAML SSO, RBAC roles, and optional auth enforcement on the REST API and console.
Enterprise · Phase 3
Context Management for Agents
Deploy the 28-skill context-engineering platform and callable runtime with SSO, RBAC, tenant isolation, policy gates, audit trails, and finops controls — without changing skill content.
Multi-tenancy
Tenant-scoped skill catalogs, usage metering, and chargeback reporting per organization.
Policy & approvals
OPA-backed policy checks and publish-approval workflows for regulated skill rollouts.
Audit & compliance
Hash-chained audit events with secret redaction — maps to common frameworks, not certification.
Deployment modes
SaaS, customer VPC (Terraform), and air-gapped bundles with embedded OPA and file vault.
Runtime primitives
Masking, compaction, budgeting, and pipelines callable via MCP, REST, and SDKs.
This platform enables controls that map to common compliance patterns.
It does not imply SOC 2, FedRAMP, or ISO certification.
Phases 1–2 run with auth disabled by default (CONTEXT_SKILLS_AUTH_MODE=disabled).