Who it's for
Platform
Resources
subtopic
Add real users: login with JWT/OAuth, roles (admin, agent, viewer), and tenants (each client/team sees only its own documents, conversations, prompts and costs). Enforce the tenant in every query and in vector-DB filters; store secrets in a secret manager; encrypt data at rest; keep CORS and rate limits per tenant.
Builds on: 2.6 Security basics, 5.9 Security