Security

Security is about minimizing blast radius:

  • restrict tools (especially exec)
  • sandbox risky execution
  • avoid exposing the Gateway directly to the public internet without protection

See also: