Idolum / EvidenceBounded execution
Kenogram security boundary
The implementation makes admitted mounts, networks, secrets, resource limits, lifecycle, and persistence explicit and inspects the resulting runtime.
Disclosure boundaryA container is one boundary, not a universal safety claim. Kenogram is not a prompt filter, does not certify a hostile host, and does not protect authority deliberately admitted by the operator.
Verified 2026-07-17 against commit 6c8a8b95907b.