Isolation
Each conversation receives only its mounted workspace and dedicated HOME volume. Capabilities are dropped and host data is not mounted.
Governed by construction
Agents can act without inheriting everything.
ChannelGate places each conversation in its own rootless container, workspace and persistent tool identity. Access is explicit at the channel boundary.
Credentials
Personal, organization and channel identities remain distinct. Channel secrets are write-only and redacted from output.
Governance
Allowed users, tools, skills, modes and network intent are visible and independently configurable per conversation.
Accountability
Work, approvals, history and usage remain in the team conversation. Platform license mutations are auditable.