- Tree-sitter security - LSP validation - Memory poisoning defenses - Long-term memory trust scoring - Documentation trust scoring - Policy engine - Sandboxed Docker execution - Container isolation - Capability tokens - Taint tracking - Multi-agent security - Security evaluation harness - Advanced observability