Security Boundaries

Policy Gates

HardKAS can enforce policy gates that block mainnet execution by default in supported workflows.

Infrastructure, not Custody

HardKAS is developer infrastructure, not a custody or consensus-security layer.

Main rule. If a feature is not in the capability report (the SDK's capabilities.get(), derived from the checks the features themselves use), agents and docs should not imply that it exists.