Bounded teams

The organization view of Bounded: one place to see and govern what a team's apps, agents, and services actually do. Three layers sit under one roof:

• Observe. Every policy decision on every write (allowed or blocked, with the actor, the collection, and the invariant that fired) and every external action an agent takes, as a durable, filterable record. This is the org-scoped view of the same evidence described by the root skill's public per-app observe guide.
• Enforce. Boundaries on what may happen: spend and rate caps, escorted external actions checked before they fire, and the app's own proven invariants. A blocked action reads the same everywhere: declined, naming the boundary or invariant.
• Custody. Where secrets and credentials live, who can reach them, and the record of every access.