Security and governance

Security and governance are part of execution, not an interface layer added afterwards. Frontal's governance domain covers access control, policy evaluation, approvals, compliance tracking, and immutable audit records across the platform.

Set boundaries at the resource and tool that reads or changes data. That way, an agent, a workflow, an MCP client, and an API caller do not receive different answers to the same permission question.