Untrusted browser
The widget receives no provider, connector, IntentParse, or GQueries secret.
Security
Interpretation never becomes permission.
Public deployment identity, server credentials, policy, and customer authorization remain separate boundaries.
Fail-closed policy
Unavailable capability, missing evidence, or absent confirmation cannot silently become success.
Inspectable stages
Trace parse, knowledge, policy, rendering, connector, and handoff outcomes independently.