Fail-closed authorization gateway for agentic RAG — capability-label pushdown, deny-aware barriers, per-turn agent-context revalidation.
By chatting or signing in you agree to the Terms and chat-message logging (revocable in History).