Read the wire
The protocol is built around encrypted envelopes, MLS group membership and a capability vocabulary for clients and agents. The relay routes ciphertext and never receives the group keys needed to decrypt it.
Agent contract
In a repository, the .weald directory holds tickets, events, plans and QA evidence as files. The in-process MCP server lets an agent update that same contract, report progress and ask a durable question.
Limits
Transport metadata remains visible to an operator. Any content sent from an agent to a model provider is outside the relay boundary.