How a write is allowed to happen.
The model proposes. A gate decides. The gate is a person, or a keyword filter. An LLM yes or no is not a gate. Only the runtime commits, and the commit record names that runtime.
A side effect has to be a capability you declared. Undeclared means the call does not happen. Credentials for those systems stay with the runtime. They are not placed in the model context.
SAML is on Platform Business and on Kit Business. Usage meters store counts, not content. This page does not claim a certification.
Report a problem on the contact form.