Control plane

Runtime

Coordinator health when the local control plane is enabled; otherwise auth and ownership come from Postgres.

Devices

CLI device credentials are hashed server-side. Revoking immediately blocks exchanges.

No devices registered for this session.

Agents

Capability descriptors only. Sandbox launch is remote-gated.

Driver	Model	Status
OpenCode	provider default	descriptor
Codex	provider default	descriptor

Provider and model defaults are descriptors only. Secrets never appear here.