PRIVACY
Capabilities without custody.
Kyntral's control plane should not need private workflow content to authorize device work. It handles opaque identity, device, scope, capability, job-state, and receipt metadata; local workflow inputs stay on-device whenever possible.