Tenant isolation Available
Cross-tenant reads and writes are denied at the service layer and tested adversarially.
Evidence: tests/test_tenants.py
Security
Tenant isolation, fail-closed privileged effects, credential isolation and resilience.
Privileged executor with explicit UNCERTAIN state Available
External effects run through a narrow executor with idempotency, atomic claim and reconciliation before retry.
Evidence: docs/architecture/IGBIMO_DOC11_EXTERNAL_ACTIONS_EVIDENCE_V1.md
Production secret infrastructure Planned
Planned: an OS-backed root of trust with runtime injection.
Evidence: docs/SECRETS.md