Privacy

We log decisions, not prompts.

Audit rows: agent, tool, cents, allow or deny. Provider keys are encrypted at rest. Prompt bodies are not stored by default. Full policy when we have a lawyer pass.