Permission sets — Create named sets that define, per action (view/edit/delete/publish/create), how far access reaches: all, project, team, own, or none at all.
Scoped enforcement — Access checks resolve against the assigned set's scope for each action.
Instant propagation — Updating a set's scopes re-syncs enforcement immediately for everyone assigned to it, with no per-user rewrite needed.
Safe rollout — Enforcement is gated behind a feature flag per organization, so existing orgs keep their current behavior until explicitly switched over.
Staging environment — All edits apply to Staging only. The published agent continues serving end-users unchanged until changes are explicitly published.
Change preview (diff) — Before publishing, a full diff of every change is available covering agent settings, instructions, knowledge sources, tools, and guardrails.
Publish — Promotes staging changes to Production instantly. Blocked if Staging is identical to Production to prevent no-op releases.
Publish history — Every publish is recorded with a timestamp, the publisher's identity, and a summary of what changed.
Rollback — Any previous publish can be restored back onto Staging, with a preview of the resulting changes before committing. Production is not affected until the rolled back state is published.