Security
Policy stays authoritative.
The public sandboxes never write your systems of record. Agents propose. Guardrails, SoD, and independent read-back decide.
No hidden writes
Production BAPI and MCP tools stay behind the Secure Action Gateway. Demos use a synthetic tenant.
Evidence ledger
Every model route, tool call, and denial is replayable. HTTP 200 is not verification.
India-ready controls
Indian PII detectors, DPDP-oriented retention, and sovereign routing are part of the control plane — not a slide.