Privacy
Ops‑only telemetry. No employee surveillance. Lawful, permissioned overlays with auditable controls.
- Least‑privilege by default; short‑lived tokens
- No “global share” inheritance
- Audit bundles exportable on demand
- BYOK/KMS for sovereign Wings where required
