Constrained actions
Athena executes supported actions through a constrained runtime instead of arbitrary model-generated code.
Security
Automation is useful only when its boundaries are clear to the user.
Athena executes supported actions through a constrained runtime instead of arbitrary model-generated code.
Payments, publishing, deletion, password handling and message sending should never receive automatic permission.
Unsupported targets are routed to a safe fallback or rejected instead of becoming shell commands or unknown URLs.
Where possible, an action is considered successful only after checking the expected state, not merely after starting a process.
The user should see permission requests and be able to cancel before consequential actions occur.
Simple actions can be fast. Important actions ask. Unknown outcomes are not disguised as success.