Use least privilege
Prefer Workspace-scoped assignments unless Organization-wide access is required. Give each Agent or integration its own Service Account and credential.
Protect credentials
External-Agent credentials should target one stable Agent ID. Store generated secrets in a secret manager or protected runtime environment. Never place them in source code, screenshots, prompts, tool inputs, or Trace metadata.
Verify Channel callbacks
Enable signature verification for Twilio, Mailgun, Slack, and any other channel provider that supports it. GroundForge should process a message only after the provider request is verified.
For external Agents, the SDK checks the Gateway rule immediately before a governed tool call. If the required rule cannot be confirmed, the tool does not run.
Treat Traces as sensitive
Traces may contain user messages, prompts, tool inputs, and outputs. Limit access to people who need it. Known secret fields are redacted, but callers should still avoid placing credentials in ordinary request content.
Use attachment-size and content limits. Do not log raw media bytes. Keep media-processing model credentials with the Agent, not the Channel.Last modified on July 27, 2026
