The workspace is the boundary
A paying customer gets their own database, an enterprise its own machine. It is not a column that separates two customers: it is a connection that does not open the other one.
Authority
Who may do what, and the trace of what the agents touched.
What changes on Monday morning
On Monday morning you know who came into your workspace last week, and who tried without getting in.
You know what your agents did there.
And you can cut all of it at once, without calling us.
How
One token per machine, revocable
Every assistant gets its own token, shown once and never again. It opens your project-management items and nothing else — not your code, not your billing. You revoke one without touching the others.
The access log, and the agents' own record
Who came in, who was refused, and which verbs your agents called, day by day. And the switch that cuts the outbound flows: the record then shows that nothing more leaves.