THE NYMWELL FOUNDATION
Control before execution.
An agent may propose an action. Authority must remain explicit.
Scoped identity
The control plane uses signed-in Sites identity or scoped, expiring API keys. Raw API-key secrets are returned once and stored only as hashes.
Approve the exact action
DNS writes are staged as change sets. Registrar, payment and upstream DNS execution stays disabled until a verified adapter, exact quote and human approval are present.
Operational evidence
Audit retention, incident response, encryption configuration, penetration testing and access reviews must be verified before commercial launch. No completed audit is asserted.