The network surface with no Nginx by default, optional TLS, the identity boundary where GM is the sole token issuer, and MCP/Agent permission scope.