Security

Ultra-Powerful. Equally Secure.

Krypton is built for Mission Critical Enterprises.

Multi-Tenant Isolation

Every project belongs to an organization. All queries are scoped by RLS policies enforced at the database, not just the application layer.

Eight Roles, 22 Permissions

Owner, Administrator, Product Manager, Tech Lead, Developer, QA Reviewer, Release Manager, Viewer — mapped to a fine-grained permission matrix.

Signed A2A Envelopes

Every agent handoff is a typed envelope with actor allow-lists, correlation ids, and idempotency keys. Rogue agent chains are structurally impossible.

Human Approval Gates

Seven distinct gate types: roadmap, plan, checkpoint, phase completion, UAT sign-off, milestone release, and prompt review.

Immutable Audit Trail

Structured events capture spawn, thinking, tool calls, artifacts, checkpoints, steering, and errors — replayable and queryable.

Secure Managed Backend

Runs on Lovable Cloud with managed authentication, encrypted-at-rest storage, and secrets held server-side.