Access
Only people who need the operating workspace have it. Portal users are not agency operators unless you intend that. Remove leavers.
Sources and instructions
Knowledge is approved, not scraped blindly into production. Agent instructions do not ask for secrets or special-category data without a written basis.
When it fails
Handover has an owner. Security issues go to security@kuga.ai, not a public ticket with credentials attached.