Canonical identity
Know which agent requested an action.
SECURITY
Security belongs where intent becomes execution.
Model safeguards are not the same as authorization. Aegisora places deterministic enforcement between agent intent and execution.
Restricted tools
Block capabilities outside the allowed execution surface.
Pre-execution gate
Make the control decision before execution is attempted.
Evidence trail
Keep the enforcement result reconstructable.