Extra limits on top of the model
- Allow-list of tools: the assistant can read results but only run solvers you approve
- Read-only mode for sensitive projects and released designs
- Human approval before any solve, file change or message leaves the team
- Scope rules: answers only from your library, with cited sources
- Per-project access, so one customer's data never reaches another
- Full audit log of prompts, tool calls and outputs