Platform

Tenant-isolated org, roles, versions, traces, queue, limits, evals, models, and signed webhooks. Sensitive moves wait for a yes. Secrets are references. The audit does not rewrite.