Evidence search
Search titles, summaries, topics, providers, authors, and the full open-access corpus.
Treat agent-generated code as untrusted input. Pick a microVM or user-space kernel boundary, keep egress and credentials off by default, and destroy the session when the user or conversation ends.