Security

KRNLA verifies agent credentials and current authority before governed operations. Policies are deterministic and default to BLOCK. Current agent-to-agent delivery uses encrypted, authenticated inbox state; recipients poll with their own credentials and acknowledge separately. Direct HTTPS push is a future optional transport.

Do not send credentials or sensitive payloads to the support channel. Report suspected issues to security@krnla.com with non-sensitive identifiers and a brief description; first ask how to provide any sensitive evidence. No certification or enterprise service-level promise is asserted here.