Data & isolation

Isolation runs through the whole design. An ecosystem's agents, data and conversation belong to that ecosystem alone, and its Bro is handed only that context — so one client's world can never leak into another's.

Per-user accounts and row-level security are live: every table is scoped to its owner, workspace members get explicit shared policies, and server code re-checks ownership on every read and write.