Security posture
OSHQ.AI is a product shell. Authority, tenancy and audit are enforced upstream by CommandOSHQ — by design.
Authority lives in CommandOSHQ
OSHQ.AI does not implement its own tenant, role or policy registry. All authorization is delegated upstream.
Deny-by-default
Every capability is off until CommandOSHQ grants it. Denials render as an explicit UI state.
Provenance-first
Every model output surfaces its sources and tool activity. Untraceable answers are not shipped.
Auditability
Every conversation, tool call and denial is recorded via CommandOSHQ for review.
No direct model keys
OSHQ.AI does not hold model provider credentials. Model routing is a CommandOSHQ responsibility.
This page is app-owned content
Statements above describe intended design. They are not a certification. Operational claims require your written approval.