Your session is hardware-tethered and end-to-end encrypted. All tool executions run in isolated containers.