Agent Isolation
Each agent receives a dedicated wallet and API key. Requests, executions, and activity are scoped to that identity. No shared state between agents — every wallet is cryptographically isolated.
Security Model
- Private keys encrypted at rest using AES-256-GCM.
- Stateful routes require API-host context verification.
- Optional admin mode for registration and listing.
- Per-agent request ownership enforcement on all routes.
Deployment Pattern
Frontend can run on edge hosting while stateful API routes run on VPS with persistent storage and secret environment. This split allows scaling the read layer independently from the execution layer.