OWOnly What It NeedsAgent Security Lab
Honest limitations

What this lab does not prove

Only What It Needs is a transparent experiment—not a certification, encrypted vault or claim of perfect security.

01

Synthetic data only

The public lab does not process real invoices, customer records, banking data, credentials or private documents.

02

A bounded threat model

The demonstration tests its policy interface and isolation contract. It does not prove the absence of operating-system, browser or supply-chain vulnerabilities.

03

No model-weight training

The experiment controls runtime context. It does not fine-tune or alter a foundation model's weights.

See the boundary work

Replay the fictional invoice.

Open the experiment →