Built for trust before autonomy

Vayna workers are designed around permissions, approvals, audit trails, workspace separation, safe test mode, and human escalation before live customer-facing action.

Human approval before customer-facing actions

No outreach without approval

Role-based permissions

Workspace separation

Audit logs

Safe test mode

Clear worker limits

Escalation to humans

Bridge auth separate from user auth

No public Hermes exposure

Hermes remains private infrastructure

Worker bridge authentication stays separate from user sessions. Hermes is not public, and port 8642 must remain private.