Privacy

We log decisions, not prompts.

Audit rows: agent, tool, cents, allow or deny. Provider keys are encrypted at rest. Unlock secret is never stored; it wraps and unwraps those keys, and agents send it as x-flocktab-unlock. Prompt bodies are not stored by default. Full policy when we have a lawyer pass.