Security & governance

CharmEngine is built around approval gates, tenant separation, clear records, data-boundary controls, and enterprise review paths.

Outbound publishing, connector writes, Discord announcements, and high-cost media can require explicit approval.

Customer workspaces, brand data, connectors, assets, and proof trails are separated by tenant and role.

Plan changes, token burn, approvals, publishing actions, and proof events are designed to leave a clear activity trail.

Sensitive actions can be slowed, reviewed, sandboxed, or declined to protect customers and third-party platforms.

Eligible plans can add vendor review, custom controls, governance exports, and contracted support terms.

Risky or unclear workflow states can route to human review instead of silently continuing.