Minimization
Receive only what the authorized scope requires.
Privacy
Privacy depends on artifact origin, sanitization, network, tools, telemetry, inference, and disposal—not only on where a model runs.
Request a Launch CheckReceive only what the authorized scope requires.
Exclude credentials, personal data, and unnecessary real evidence.
Use disposable copies and controlled environments.
Use only qualified models with human review.
Treat egress, telemetry, or downtime as a blocker.
Retain only reviewed, necessary evidence.
It does not mean complete coverage, absence of risk, model autonomy, or permission to access external systems. Every run declares tools, boundaries, and failures.