Security starts with a clear boundary
This is an architectural overview, not a compliance certification or production security guarantee.
Explicit placementLocal stays on the device. Cloud uses a managed runtime.
Scoped membershipCloud Workspace access is tied to membership and role.
Isolated runtimesEach Cloud Workspace has its own managed runtime boundary.
Bring your own providerModel credentials and model billing stay separate from Worktree plans.