Keep credentials in the application
Vendor API credentials belong in your existing client or an explicitly configured remote connection. Do not place them in model context, detector documents, tool arguments or diagnostic logs. Embedded SDKs need no separate AGINDOW key. Dashboard sessions, workload access tokens and vendor credentials have different purposes.
Choose the data you inspect and retain
Embedded evaluation runs inside your process. The browser playground sends user-started GET requests directly to the selected API. Captured responses, request headers and source input remain in the tab and are not sent to an AGINDOW proxy. Statistical windows contain complete JSON documents; use sanitized fixtures for evaluation and review your own data-handling requirements before supplying real payloads. A capture size limit does not redact data. Event metadata and audit records are separate outputs: inspect their fields before sending them to your logs or archive.
Audit delivery and retention
Node audit collection is opt-in and uses a finite in-memory guest queue. Configure a tenant and persist drained records to storage you control. Queue overflow, restart and failed delivery can lose evidence. Recent events are a local rolling buffer, not an archive. The Python SDK does not expose the guest audit drain. Remote retrieval has separate process-local retention and access checks; missing evidence is not proof that a call did not execute.
Handle writes and remote trust
Mark write operations explicitly. Reconcile uncertain outcomes before retrying, and require vendor-enforced idempotency for remote fallback. Use only a remote endpoint you intentionally configured; never infer an execution URL from the website. Verify signed OpenAPI against an independently trusted key, not a key supplied with the same untrusted response.
Evaluation limits
The published SDKs are pre-alpha. Local fault and policy tests do not establish production reliability, regulatory compliance, or a managed data-retention service. No hosted guard or uptime guarantee is available. Evaluate the configured boundary and data handling in your application before deciding whether this release meets your requirements.