Security

Give agents power without giving up control.

Continual is built around explicit identity, server-side authorization, source-owned business logic, and reviewable changes.

Core principles

Control belongs in the system, not in a prompt.

The customer-owned operating system remains the authority whether work begins in a conversation, an app, or an external agent.

People, services, and agents act as named principals. Access is granted at an allowed scope rather than inherited from an invisible agent bypass.

Apps and agents use the same operating system capabilities and server-side authorization checks for consequential work.

The source behind the system is versioned. Structural changes can be inspected, tested, reviewed, and traced to the code that produced them.

Enterprise review

Continual is in developer preview. Contact us for current deployment, access, and assurance details rather than relying on a generic checklist.